Crack • Trojan

Trojan.Patched.HE (B) malicious file

Malware Removal

The Trojan.Patched.HE (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Patched.HE (B) virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Sample contains Overlay data
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.Patched.HE (B)?



File Info:

name: 4D9E8C8EBAA112E45978.mlw
path: /opt/CAPEv2/storage/binaries/002d5db022fb029fece69b3d92e05c55987b5f0ef5414c7f980c8f7095b1fc0b
crc32: FB7B51AA
md5: 4d9e8c8ebaa112e459781fa258003f4c
sha1: ad6e4124ed9997a31e484507ede7d289505c0ecc
sha256: 002d5db022fb029fece69b3d92e05c55987b5f0ef5414c7f980c8f7095b1fc0b
sha512: 6bfe402690c05e5384f09e75fcc17037ec3e213a755fa228ea88e00aa8826c5cabefb780a0b40879b524d4af1882dc20d63b6867dc19a5152b9c4b1df108f40d
ssdeep: 12288:weYmzRkgPzhFxPHbPBkOetbn9smY4MferxU2xxsZhETi88rdfGC7hBe4r:rYmzqgFHdKpYLgm2z+0v8nBe4r
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C0058B2337C2C077C63616B15C49E368A2B7FC700E325B0777D92B5E9E79A428E36616
sha3_384: 94736e1b52de58cf50bec37b61026c558dc3386345cff66bb97fcb30e25281802a9c52a2db42e525f96a4c71cef09e50
ep_bytes: 68f2514400e934060000e80f00000043
timestamp: 2011-05-21 03:25:40


Version Info:

CompanyName: NVIDIA Corporation
FileDescription: NVIDIA User Experience Driver Component
FileVersion: 8.17.12.7533
InternalName: nvxdsync.exe
LegalCopyright: (C) NVIDIA Corporation. All rights reserved.
OriginalFilename: nvxdsync.exe
ProductName: NVIDIA User Experience Driver Component
ProductVersion: 8.17.12.7533
Translation: 0x0409 0x04e4

Trojan.Patched.HE (B) also known as:

BkavW32.PatchedZB.PE
LionicTrojan.Win32.Patched.lnqW
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.Patched.HE
FireEyeTrojan.Patched.HE
CAT-QuickHealW32.Patchload.O
McAfeeW32/Katusha
CylanceUnsafe
ZillyaTrojan.Patched.Win32.29353
SangforVirus.Win32.Patched.Vkuw
K7AntiVirusTrojan ( 0026f5d91 )
BitDefenderTrojan.Patched.HE
K7GWTrojan ( 0026f5d91 )
Cybereasonmalicious.ebaa11
VirITWin32.Yoshi.E
CyrenW32/Patched.G
SymantecTrojan.Paccyn!inf
ESET-NOD32Win32/Patched.HN
BaiduWin32.Virus.Loader.l
TrendMicro-HouseCallPTCH_KATUSHA.W
Paloaltogeneric.ml
ClamAVWin.Trojan.Patched-143
KasperskyTrojan.Win32.Patched.mf
AlibabaTrojan:Win32/Patchload.134b2812
NANO-AntivirusTrojan.Win32.Patched.dwgwe
ViRobotWin32.Patched.BE
RisingVirus.Loader!1.9B09 (CLASSIC)
Ad-AwareTrojan.Patched.HE
TACHYONVirus/W32.Patched.Gen
SophosW32/Patched-AL
ComodoTrojWare.Win32.Patched.HN@3bsert
DrWebTrojan.Starter.1695
VIPRETrojan.Patched.HE
TrendMicroPTCH_KATUSHA.W
McAfee-GW-EditionW32/Katusha
EmsisoftTrojan.Patched.HE (B)
IkarusVirus.Win32.Patchload
JiangminTrojanSpy.Zbot.adxr
AviraW32/Patchload.A
Antiy-AVLTrojan/Generic.ASVirus.2BD
MicrosoftVirus:Win32/Patchload.O
GDataTrojan.Patched.HE
CynetMalicious (score: 99)
AhnLab-V3Win-Trojan/Patched.DD
ALYacTrojan.Patched.HE
MAXmalware (ai score=89)
VBA32Trojan-Spy.Zbot.gen
MalwarebytesMalware.Heuristic.1003
AvastWin32:Patched-WQ [Trj]
TencentVirus.Win32.Patched.mf
YandexWin32.Katusha.Gen
SentinelOneStatic AI – Suspicious PE
FortinetW32/Patched.MF!tr
AVGWin32:Patched-WQ [Trj]
PandaW32/Katusha.BN
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Patched.HE (B)?

Trojan.Patched.HE (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment