Categories: CrackTrojan

Trojan.Patched.LH (B) removal guide

The Trojan.Patched.LH (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Patched.LH (B) virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Patched.LH (B)?


File Info:
name: 412FADDC36721FC3198B.mlwpath: /opt/CAPEv2/storage/binaries/7145a49efb49c11fe9ed5ef97a93499a69c5ce9936d2b7c43e0e392e708098cecrc32: F92613A8md5: 412faddc36721fc3198bae397ac7650asha1: d75e292dfe6e8ba40de20e333fd364a6800cd10csha256: 7145a49efb49c11fe9ed5ef97a93499a69c5ce9936d2b7c43e0e392e708098cesha512: b9d7f187a51333bdee9f1c211b22ac1b7a867b9e21f4e20fb8d10b80c91a6ea7fadb30826dc9e55bea032240cde1056a1a77849266a2c5e41f6fcca3a00bb370ssdeep: 24576:C3EtiQJfcYKZEhhaCW/g2GqgPr3k5wgNjlTtvGf/6t:ntiQkEGCWYSgT3QP5lTtOf/6ttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T126758E6072905175E5A206F8FA789B7615AFBC311B28C8CBD3942BAD1D30AC27E35377sha3_384: b870c076b5509e3f2ffb918c4a2fec81e0320836cd4d733a14424b1d9e3aff8bd127b5d3d8d889e808b3dd33ba69a1edep_bytes: 558bec81ec70090000e8b20c00008985timestamp: 1970-01-01 15:50:05
Version Info:
CompanyName: Sogou.com Inc.FileDescription: 搜狗输入法 扩展功能管理器FileVersion: 13.0.0.6801InternalName: SogouIME Component ManagerLegalCopyright: © 2022 Sogou.com Inc. All rights reserved.OriginalFilename: SogouComMgr.exeProductName: 搜狗输入法ProductVersion: 13.0.0.6801Translation: 0x0804 0x04b0

Trojan.Patched.LH (B) also known as:

Bkav	W32.SmallzerotND.PE
Lionic	Trojan.Win32.CliptoShuffler.tqXq
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Patched.LH
FireEye	Generic.mg.412faddc36721fc3
McAfee	Artemis!412FADDC3672
Malwarebytes	Trojan.Downloader.RZ.Generic
VIPRE	Trojan.Patched.LH
Sangfor	Downloader.Win32.Patched.V7no
K7AntiVirus	Virus ( 0055485e1 )
Alibaba	TrojanDownloader:Win32/SmallAgent.000df946
K7GW	Trojan-Downloader ( 00552ecf1 )
VirIT	Win32.Nov15th.A
Cyren	W32/ZeroDloader.A.gen!Eldorado
Symantec	Infostealer
ESET-NOD32	Win32/TrojanDownloader.Agent.EQH
Zoner	Trojan.Win32.133837
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Patched.rw
BitDefender	Trojan.Patched.LH
NANO-Antivirus	Virus.Win32.Gen.ccmw
Avast	Win32:DeadZero [Inf]
Tencent	Virus.Win32.Patched.kh
TACHYON	Worm/W32.ZeroDownloader
Sophos	Troj/DwnLdr-YLF
F-Secure	Malware.W32/Infector.Gen
DrWeb	Trojan.DownLoader33.36265
TrendMicro	TrojanSpy.Win32.FICKERSTEALER.SMTHA.hp
McAfee-GW-Edition	BehavesLike.Win32.Kudj.th
Trapmine	suspicious.low.ml.score
Emsisoft	Trojan.Patched.LH (B)
Ikarus	Trojan-Downloader.Win32.Agent
GData	Win32.Trojan.PSE.1100EPL
Jiangmin	TrojanDownloader.Generic.bdga
Avira	W32/Infector.Gen
Antiy-AVL	Trojan[Downloader]/Win32.Agent.a
Arcabit	Trojan.Patched.LH
ZoneAlarm	Trojan.Win32.Patched.rw
Microsoft	TrojanDownloader:Win32/SmallAgent!atmn
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R282625
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.36350.Gz2@aiztwOaj
ALYac	Trojan.Patched.LH
MAX	malware (ai score=84)
VBA32	BScope.TrojanBanker.CliptoShuffler
Cylance	unsafe
Panda	Generic Suspicious
TrendMicro-HouseCall	TrojanSpy.Win32.FICKERSTEALER.SMTHA.hp
Rising	Worm.Phorpiex!1.BB1C (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.EQH!tr
AVG	Win32:DeadZero [Inf]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)