About “Application.ProcessHacker.1 (B)” infection

The Application.ProcessHacker.1 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.ProcessHacker.1 (B) virus can do?

• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Behavioural detection: Transacted Hollowing

How to determine Application.ProcessHacker.1 (B)?

File Info:
name: FFE99C10CE34ADAF8F99.mlw
path: /opt/CAPEv2/storage/binaries/beefa7d1df2fdfe74d193a94e7eb6e27513e6092a5c58812c91dcb5a17129edc
crc32: 5A3A690E
md5: ffe99c10ce34adaf8f99c6855f2a7865
sha1: 82338169a25205c53afbf67ed097bd06d757fdce
sha256: beefa7d1df2fdfe74d193a94e7eb6e27513e6092a5c58812c91dcb5a17129edc
sha512: eed5ba3f6f11cb71fa9b9b541e1acab672d3b9f6a5282e34bd62a558e596c70103db206b0152d4ce75ecd77f9b2748c8ba0a4dc94818371df471ef7d70d991dc
ssdeep: 24576:xx5tUcZTVoXZiWqZuC4rVUrzEjYxtOdQCwdMeETOhIPm9iU3OUgE:xxUiyzgJ4hezEUxtO1TOhcqF3pgE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FBB53B11A2808015F5F349B69ABAA1A9A9797E710F2490DF33807EFD9B31BD1ED30717
sha3_384: 5fbcb32ea596bfc90eee626bf8e3b1c6c25729981c44a883309afdaf71d8c1b577680713a0b15e1bcc98e79d1f1ecf16
ep_bytes: 558bece878fdffff5dc3cccccccccccc
timestamp: 2016-09-29 08:36:33

Version Info:
CompanyName: wj32
FileDescription: Process Hacker
FileVersion: 3.0.0.0
InternalName: Process Hacker
LegalCopyright: Licensed under the GNU GPL, v3.
OriginalFilename: ProcessHacker.exe
ProductName: Process Hacker
ProductVersion: 3.0.0.0
Translation: 0x0c09 0x04b0

Application.ProcessHacker.1 (B) also known as:

How to remove Application.ProcessHacker.1 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.