Backdoor

Backdoor.Win64.Agent.vho (file analysis)

Malware Removal

The Backdoor.Win64.Agent.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Win64.Agent.vho virus can do?

    How to determine Backdoor.Win64.Agent.vho?

    
    

    File Info:

    crc32: 9E16FC19
    md5: 7a383f89fd374c0d231ce5532f20b82a
    name: 7A383F89FD374C0D231CE5532F20B82A.mlw
    sha1: b89a79c80549c96954eb15d7f037010389d70f65
    sha256: 7b388f71ad2763151a875e289e052af2807b28be2c0784dd72962639dbac3eec
    sha512: 6c9b349ed4d250b237726d850437efadf4c5b63f1ab63b6ff74167b4c73965f662ac2c0e9602b243c929347c38ca260e9f9a20deb6659ed0debde03ed0c2cbeb
    ssdeep: 49152:4SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQr:4vWfKg78HIVX+vQr
    type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows

    Version Info:

    0: [No Data]

    Backdoor.Win64.Agent.vho also known as:

    K7AntiVirusTrojan ( 0053d1b71 )
    Elasticmalicious (high confidence)
    DrWebBackDoor.Siggen2.3464
    CynetMalicious (score: 99)
    CAT-QuickHealBackdoor.Win64
    ALYacTrojan.GenericKD.36308789
    CylanceUnsafe
    ZillyaBackdoor.Agent.Win64.368
    SangforSuspicious.Win32.Agent.kf
    CrowdStrikewin/malicious_confidence_100% (W)
    AlibabaBackdoor:Win32/Banload.556a1e10
    K7GWTrojan ( 0053d1b71 )
    Cybereasonmalicious.9fd374
    CyrenW64/Agent.CUT.gen!Eldorado
    SymantecTrojan.Gen.MBT
    ESET-NOD32a variant of Win32/Agent.ZPC
    APEXMalicious
    AvastWin64:Malware-gen
    ClamAVWin.Dropper.PoisonIvy-9857091-0
    KasperskyHEUR:Backdoor.Win64.Agent.vho
    BitDefenderTrojan.GenericKD.36308789
    ViRobotTrojan.Win32.Z.Agent.4468292
    MicroWorld-eScanTrojan.GenericKD.36308789
    TencentMalware.Win32.Gencirc.10b86176
    Ad-AwareTrojan.GenericKD.36308789
    SophosMal/Generic-R + Troj/Agent-BDRP
    ComodoTrojWare.Win32.UMal.psons@0
    VIPRETrojan.Win32.Generic!BT
    TrendMicroTROJ_GEN.R002C0DE221
    McAfee-GW-EditionBehavesLike.Win64.Trojan.rm
    FireEyeGeneric.mg.7a383f89fd374c0d
    EmsisoftTrojan.GenericKD.36308789 (B)
    WebrootW32.Malware.Gen
    AviraTR/Agent.akyvn
    KingsoftWin32.Hack.Undef.(kcloud)
    MicrosoftTrojan:Win32/Banload.R
    GDataTrojan.GenericKD.36308789
    AhnLab-V3Malware/Win64.RL_Generic.R303595
    McAfeeGenericRXAA-AA!7A383F89FD37
    MAXmalware (ai score=100)
    VBA32Backdoor.Win64.Agent
    MalwarebytesTrojan.Dropper
    TrendMicro-HouseCallTROJ_GEN.R002C0DE221
    RisingBackdoor.Agent!8.C5D (CLOUD)
    YandexBackdoor.Agent!ByhdPxshUDE
    IkarusTrojan.StartPage
    MaxSecureTrojan.Malware.300983.susgen
    FortinetW64/Agent.ZPC!tr
    AVGWin64:Malware-gen
    Paloaltogeneric.ml

    How to remove Backdoor.Win64.Agent.vho?

    Backdoor.Win64.Agent.vho removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment