Hoax.Win32.PCAccelerator.vho removal instruction

The Hoax.Win32.PCAccelerator.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Hoax.Win32.PCAccelerator.vho virus can do?

• A file was accessed within the Public folder.
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded win api malware family
• Collects information to fingerprint the system
• Yara detections observed in process dumps, payloads or dropped files

How to determine Hoax.Win32.PCAccelerator.vho?

File Info:
name: 281F1AC2E656C5FB8A17.mlw
path: /opt/CAPEv2/storage/binaries/0b7971197f03e8abf43276c284cf5ebffd90e66b35a456f777483289f9ffb37a
crc32: 343BE313
md5: 281f1ac2e656c5fb8a1710768a0fdbaa
sha1: d213d02f63152ca3354f3c751d41a7337af3e5a3
sha256: 0b7971197f03e8abf43276c284cf5ebffd90e66b35a456f777483289f9ffb37a
sha512: 047450a3e02a5b6d9d751740b3ca84d16f3d624fd58059f55d7bfb6f763544b206c22a551dd50692c020b7feab1082e4c320903512160e7f5ff87b692759957b
ssdeep: 98304:oDNgergjY84vLgAkygRC764JiiX6umVVhtfWj2kE7+E2kE7+AxWxoWOaZWRK0:TeDvLKg7zJiVumVVhVWi7+B7+oOWR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B1667E107DA09007E56B89F0BC4DB23510FC6FB9FA1E505F9AE87F681A346E53D2B216
sha3_384: d74e3d099e9fdb506e0ac6a2373e12a3aecbd3b7e44ee6c569423d1b10d24c971825b6a2012ee5fbbca26aa70fd0f2a5
ep_bytes: e85a0c0000e98efeffff558becf64508
timestamp: 2019-08-01 22:46:04

Version Info:
CompanyName: DIGI MICROSERVICE LIMITED
FileDescription: PCAP
InternalName: PCAP.exe
OriginalFilename: PCAP.exe
ProductName: PCAP
FileVersion: 1.0.4.50
LegalCopyright: Copyright DIGI MICROSERVICE LIMITED 2018
ProductVersion: 1.0.4.50
Translation: 0x0409 0x04b0

Hoax.Win32.PCAccelerator.vho also known as:

How to remove Hoax.Win32.PCAccelerator.vho?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.