Risk

Win64/Riskware.CobaltStrike.Artifact.T removal tips

Malware Removal

The Win64/Riskware.CobaltStrike.Artifact.T is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win64/Riskware.CobaltStrike.Artifact.T virus can do?

  • Presents an Authenticode digital signature

How to determine Win64/Riskware.CobaltStrike.Artifact.T?


File Info:

crc32: 41B68BD2
md5: 31451142d47c8ae4b59da98940ab4f16
name: 31451142D47C8AE4B59DA98940AB4F16.mlw
sha1: b4db5322ea3fb4c90d4dcfe6ce41cb98c49a0b26
sha256: 1f5fd052dcc9d28b5c9b2ad4b1186c1051027d9df6814be97b2ec612578aac6b
sha512: 407fd357ce14a8ec3ffbfd87cd9cf5d2beddecff6db55a843f670094e33d27efb8550cef9ea5204ce05398af35310866a8bcd4fa4fc693dce7889f104017c332
ssdeep: 6144:2XTPTph0RixI+yBwx8nURYxfpz5j5l9JuT0tCPvPTQKBmowoh8RqGQ5lX:2jPyKxHRWj5gTx3PLAomQX
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:

0: [No Data]

Win64/Riskware.CobaltStrike.Artifact.T also known as:

LionicTrojan.Win32.Snojan.4!c
DrWebBackDoor.Meterpreter.199
CAT-QuickHealTrojan.Cobaltstrike
ALYacTrojan.GenericKD.46314037
CylanceUnsafe
ZillyaTrojan.Snojan.Win32.4206
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Snojan.37ddc0af
K7GWTrojan ( 0057c94f1 )
K7AntiVirusTrojan ( 0057c94f1 )
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Riskware.CobaltStrike.Artifact.T
APEXMalicious
AvastWin64:MiscX-gen [PUP]
CynetMalicious (score: 99)
KasperskyTrojan.Win32.Snojan.ctjw
BitDefenderTrojan.GenericKD.46314037
MicroWorld-eScanTrojan.GenericKD.46314037
Ad-AwareTrojan.GenericKD.46314037
SophosMal/Generic-R + ATK/Cobalt-BG
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_FRS.0NA103EI21
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.46314037
EmsisoftMalCert.A (A)
WebrootW32.Trojan.Gen
AviraTR/AD.MeterpreterSC.kpgws
Antiy-AVLTrojan/Generic.ASMalwS.3329735
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/CobaltStrike.STA
GridinsoftSuspicious.XOR_Encoded.bot!yf
ArcabitTrojan.Generic.D2C2B235
GDataTrojan.GenericKD.46314037
AhnLab-V3Trojan/Win.COBEACON.C4451016
McAfeeArtemis!31451142D47C
MAXmalware (ai score=82)
VBA32Trojan.Snojan
MalwarebytesTrojan.CobaltStrike
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_FRS.0NA103EI21
MaxSecureTrojan.Malware.118056960.susgen
FortinetRiskware/Snojan
AVGWin64:MiscX-gen [PUP]
Qihoo-360Win64/TrojanDownloader.Nemucod.HggASU0A

How to remove Win64/Riskware.CobaltStrike.Artifact.T?

Win64/Riskware.CobaltStrike.Artifact.T removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment