HackTool:Win32/ProcTerminator.A!dha removal guide

The HackTool:Win32/ProcTerminator.A!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/ProcTerminator.A!dha virus can do?

Authenticode signature is invalid

How to determine HackTool:Win32/ProcTerminator.A!dha?


File Info:
name: D04CFCF0B772F8B50F89.mlw
path: /opt/CAPEv2/storage/binaries/41f77d6d23bba3b485c1c6f300655b2daf2d184de07f163afae7ea908e1833e2
crc32: E5B0CBA5
md5: d04cfcf0b772f8b50f89f3e17167382e
sha1: 22814b514abaa2c9eb181f3c1064d4b5f629bc18
sha256: 41f77d6d23bba3b485c1c6f300655b2daf2d184de07f163afae7ea908e1833e2
sha512: c6f9d2ace88c2f7eee24acbac293dcef2f81b87eb7af480f10c2970f8c6fd3491e7dc2c341eb20dbc780403ed4ed41df6454fad264a0adb57f5e225eb62b4641
ssdeep: 24576:NuoXBuCEkOtV2Z5l4egm10v3ORMl60n8tJkqzCVY+6i5:goXBlhFZ5lVgm10v+R/0n8Lc7x
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T18B35E856EAF341E4D4F6C03852977637BCB1B86587289BC386409B166B72BF0B53E360
sha3_384: 833d59ce7d684357744167ed62c0f21bd1a07d0f064f0d383b165137e6906703e76dbb32e6d1f870023598d714156e32
ep_bytes: e8c5030000e974feffff558bec6a00ff
timestamp: 2024-02-05 16:12:59

Version Info:
0: [No Data]

HackTool:Win32/ProcTerminator.A!dha also known as:

Bkav	W32.Common.DF7CECD2
Lionic	Trojan.Win32.KillProc.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop26.33923
MicroWorld-eScan	Trojan.Generic.35328923
CAT-QuickHeal	Trojan.Agent
Skyhigh	BehavesLike.Win32.Sabsik.th
Malwarebytes	Trojan.AVKill
VIPRE	Trojan.Generic.35328923
Sangfor	Trojan.Win32.Killproc.V3ef
K7AntiVirus	Trojan ( 005b2cff1 )
K7GW	Trojan ( 005b2cff1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/KillProc.NFS
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R011H09CF24
BitDefender	Trojan.Generic.35328923
NANO-Antivirus	Trojan.Win32.KillProc.kkjmaa
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.11bd7887
Emsisoft	Trojan.Generic.35328923 (B)
F-Secure	Heuristic.HEUR/AGEN.1317016
Zillya	Trojan.KillProc.Win32.7945
FireEye	Generic.mg.d04cfcf0b772f8b5
Sophos	Mal/Generic-S
Google	Detected
Avira	HEUR/AGEN.1317016
Varist	W32/ABTrojan.PUAG-4682
Antiy-AVL	GrayWare/Win32.Wacapew
Microsoft	HackTool:Win32/ProcTerminator.A!dha
Arcabit	Trojan.Generic.D21B139B
GData	Trojan.Generic.35328923
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.MalwareX-gen.C5599411
ALYac	Trojan.Generic.35328923
MAX	malware (ai score=81)
Cylance	unsafe
Rising	Trojan.KillProc!8.2A8 (CLOUD)
Yandex	Trojan.KillProc!+E0NOBVkh6E
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.237110656.susgen
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan:Win/KillProc.NFS

How to remove HackTool:Win32/ProcTerminator.A!dha?

HackTool:Win32/ProcTerminator.A!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X