Malware

How to remove “Hoax.Win32.PCChist”?

Malware Removal

The Hoax.Win32.PCChist is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Hoax.Win32.PCChist virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

edgedl.me.gvt1.com

How to determine Hoax.Win32.PCChist?


File Info:

crc32: 45C7D0DC
md5: bc18936afeefdb34ab23bc574923ae2e
name: BC18936AFEEFDB34AB23BC574923AE2E.mlw
sha1: cdee8439a914f16ebcb53ad1ccbb76b6b65780b4
sha256: 302c9dc95d788ab1a30b4def777c89f80e7c4a1556924cccba7641c5e8a30408
sha512: 8da9a136bb7a2b9af1893feb57bb086bd5c01a807b0d39f74cdf29f70e522f2ff857a4370af16717a28f1b42923b9f48d1b041923653e4c823846142dc89b9a7
ssdeep: 3072:WJcVPNxrYzpBAxTz5L1A5jAg6NkCuAnUORdKWfLWlS:ccRNxrY1BGMH6JuAUMdDfLT
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

FileVersion: 2.21.110.0
Translation: 0x0409 0x04b0

Hoax.Win32.PCChist also known as:

CylanceUnsafe
ZillyaTool.PCChist.Win32.93
APEXMalicious
AvastWin32:Malware-gen
KasperskyHoax.Win32.PCChist.gen
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.RansomNemty.dh
JiangminTrojanDropper.Potao.a
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1134178
Antiy-AVLTrojan/Generic.ASMalwS.317EDFE
AVGWin32:Malware-gen
Qihoo-360HEUR/QVM20.1.017B.Malware.Gen

How to remove Hoax.Win32.PCChist?

Hoax.Win32.PCChist removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment