GridinSoft Threat Intelligence

Risk detection reports

Riskware and dual-use utilities that may be legitimate but require careful review.

Detection category

Risk threat reports

Riskware and dual-use utilities that may be legitimate but require careful review. ThreatInfo groups these records so analysts and users can review related filenames, hashes, and GridinSoft detection names from one place.

This category page groups related ThreatInfo records so users can compare file names, hashes, publishers, and GridinSoft detection names in one place.

Indexed reports 368

Latest shown 60

Detected 58

Observed detection families

Common Risk verdicts

These are the most frequent GridinSoft detection names in the latest reports shown below. Repeated families help users recognize whether a file belongs to a broader campaign or bundled software cluster.

Risk.RemoteAdmin 33 reports

General Threat 5 reports

Risk.Gen 4 reports

Risk.CoinMiner 3 reports

PUP.NirSoft 2 reports

Risk.HackAV 2 reports

Risk.NetFilter 2 reports

Trojan.Agent 2 reports

Analyst focus

What to check first

Use this page as a starting point: open the exact file report, compare the MD5 hash, and run a local scan before deciding whether the file is safe.

A known filename appearing with an unexpected hash or location.
Publisher, product, or certificate data that does not match the file origin.
Repeated detections from the same family across recent reports.

Frequent metadata

Publishers and products

Publishers Two Pilots 10 NirSoft 7 Microsoft Corporation 6 Ammyy LLC 4 Audiovkontake.ru 2 Collective Intelligence forum.ru-board 2

Products Virtual Printer Driver 10 Microsoft® Windows® Operating System 6 Remote Utilities Printer 6 PasswordFox 5 Ammyy Admin 4 Blat 2

GridinSoft Anti-Malware

Scan for Risk detections

If a file from this category appears on your computer, verify the exact report and run a full system scan. GridinSoft Anti-Malware is used to detect and remove threats listed in ThreatInfo reports.

Download scanner

01 Match the hash

Use the MD5 value from the report. A filename alone is not enough because unrelated files can share the same name.

02 Review origin

Check the publisher, product name, certificate, and file path for mismatches or unfamiliar install locations.

03 Scan and remove

If the file is unexpected, scan the device and remove related startup entries, bundled components, and leftover files.

Recent reports

Latest Risk file records

hi6bletnst.dll d43fa82fab5337ce20ad14650085c5d9 Risk.RemoteAdmin rn9dtq2nys.dll dab4646806dfca6d0e0b4d80fa9209d6 Risk.RemoteAdmin TNODUP.exe.quarantined f4bbb6a76293e399f200f184afa25b73 Trojan.Agent x.exe 367db1bf932ffc1efac3ebca54897c85 Trojan.Agent setupdrv.exe 5729801e83e5b25388d6ca65661d896d Risk.RemoteAdmin unidrv_rup.dll f6595a12000ca15ff212482f6d968c09 Risk.RemoteAdmin rupui.dll 2f0758a4cf0cf91879ceba40ab6c6cc7 Risk.RemoteAdmin srvinst_x64.exe 20528bca710227b71ff894967aac9e26 Risk.RemoteAdmin progress.exe 4a3fcf52fad7142f54d1f5d45f4a06fe Risk.RemoteAdmin rupui2.exe 542529d78a3fe7ff9be39f1ff9c85c07 Risk.RemoteAdmin rfusclient.exe 7718f71bd99e74323812c29b2cc1a3af Risk.RemoteAdmin unidrvui_rup.dll dd32a9c6627a7aedde13c7a91893fc85 Risk.RemoteAdmin unidrvui_rup.dll 13dcedb0558ddaa26b3110d4698f7220 Risk.RemoteAdmin VPDAgent_x64.exe 7d4d6422f5529fa0b76c5f38182fd3f2 Risk.RemoteAdmin fwproc.exe 1e302b03a0806f5d5e8f0dcb965eee78 Risk.RemoteAdmin progress.exe 0ffee87325129a5ff7d433a209374237 Risk.RemoteAdmin ruppm.dll 8dfbc22bb73a499bc20b758ab28bda43 Risk.RemoteAdmin srvinst.exe 0701f193a68c971ad1a0d2a764dac360 Risk.RemoteAdmin ruppm.dll 1fc515ee5d7e0b0002fe7f6c4ac7af4b Risk.RemoteAdmin fwproc_x64.exe 65585187aeb6391bf1eeb69c20365485 Risk.RemoteAdmin setupdrv.exe 7d0792cc2da67704151111f058e72beb Risk.RemoteAdmin unires_vpd.dll 3ca3775cc10662c654063bf8647ee337 Risk.RemoteAdmin rupui.dll 71d11bf3448436821e8de41482cea36a Risk.RemoteAdmin unidrv_rup.dll f9428e05c0e424ce76e9a0779ad80c7c Risk.RemoteAdmin unires_vpd.dll 5bcd4b2442d6b26d484e407fc4dd1a00 Risk.RemoteAdmin rupui2.exe 87d5e864950c955057d12abdfbe704b1 Risk.RemoteAdmin VPDAgent.exe 5ca4dac50bdb989e74b060d57a8d60dc Risk.RemoteAdmin A0014251.exe ef4b628369985a3913c1afa0fb2468d0 PUP.NirSoft Trial Reset 5.0.0.112.exe 4a90b797abc860628d0289b1c637f719 Risk.HackAV UzakYardim.exe 11bc606269a161555431bacf37f7c1e4 Risk.RemoteAdmin $RMH3DZ3.exe 31f84e433e8d1865e322998a41e6d90e Risk.Blat blat.dll 724cae63522f6e5f7565a3bf4b2a719b General Threat nc (2018_07_31 08_49_26 UTC).exe ab41b1e2db77cebd9e2779110ee3915d Risk.RemoteAdmin mirc3.exe 8ad8c7cf18a1b075fcbeddae2a804d71 General Threat chromepass.exe.mwt 7b641e136f446860c48a3a870523249f General Threat A0014371.exe d14420566335ed9aef8728aec2211f25 Under review 9.exe 1d09a1fb8cd5bbc0ce008d6df52ca7c1 PUP.NirSoft Israel_994928568.exe 1fc7c230d6db0d7a0da6f415da271159 Risk.RemoteAdmin RDPConf.exe 1e4537b75cad6288f68d595d9c9b13c1 Risk.RemoteAdmin PasswordFox.exe b01492825160cee01821c34133a1294c Under review vivadrvr.sys 65a7f3e9c7f0b916a20308d44a744d40 Risk.NetFilter A0503041.exe 7f4e16384fa3bdc035015148e768a87a Risk.RemoteAdmin Keygen.exe 2e3979a243013bac959e515049da2f87 Risk.Patcher Ammyy Admin 3.5 Corporate.exe 4d853025b8cd8c725bf78e3df6cce967 Risk.RemoteAdmin excavator (2018_03_22 14_10_05 UTC).exe baf51d6f9ec2c36f483760ef414e6661 Risk.CoinMiner image.exe.dat 4a381b917881e47e201ca6cbe40b93c4 Trojan.CoinMiner poclbm_2.exe e41d27bb2f558180cfbfa7c48a0b3ffa Trojan.CoinMiner $RQ5PSRT.exe 017098b78fc270e300db9f4f714376e9 Risk.CoinMiner $RROPQ5P.exe 8f92a79a65852a79fe30aed711129aed Risk.CoinMiner A0347902.exe 1b1dd8dda5e63461a8deb5e1268478a6 General Threat $RRSUYD6.exe e6c398852cf37e06782f484f78f45f32 Risk.HackAV D6238089F118D07A1FB9CBB143A8FC2773E8260A.sys a208ced7ed63d3fd685786d61a6992cb Risk.NetFilter A.exe f8cd52b70a11a1fb3f29c6f89ff971ec Risk.RemoteAdmin NK2VIEW.EXE 84a7fec909cbeb06b636996c03f84e43 Risk.NirSoft webplugin.exe b0154906039f0cd3ab1b7c8c871944f5 Risk.Gen uninstall.exe e9b3cb8ad3605121d446c859bdee87a3 General Threat 01ceff2e487a4603.exe 9278dc5631e1bb6e7cdfdc77ee45f81c Risk.Gen 01ce7cc27a10cfc1.exe 3257a188387b8cb4398b61d2da43aecf Risk.Gen Keygen.exe e9024e5872ded9032ccdfb90c2baccfc Risk.Gen r_server.exe 6a413e4d338fb13e58916e3b8051dbbd Risk.RemoteAdmin

Questions

Risk FAQ

How should I use this category page?

Use it to find recent reports in the same detection family, then open the exact file report and compare the hash, publisher, path, and detection name.

Why can the same filename have different verdicts?

Attackers and bundlers often reuse common filenames, so the MD5 hash and metadata are more reliable than the name alone.

What should I do if a listed file exists on my device?

Do not rely on the filename only. Verify the hash, review the file location, and run a full system scan before keeping or removing it.