Trojan.Win32.Chrop.ahb (file analysis)

The Trojan.Win32.Chrop.ahb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Chrop.ahb virus can do?

• Executable code extraction
• Creates RWX memory
• Reads data out of its own binary image
• Drops a binary and executes it
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Likely virus infection of existing system binary

Related domains:

How to determine Trojan.Win32.Chrop.ahb?

File Info:
crc32: 2C1DF5FC
md5: 587ace7053cc1dbf4b55ef1f71bf2fb3
name: 587ACE7053CC1DBF4B55EF1F71BF2FB3.mlw
sha1: a0d60f0ba511d12d548ecc2406f0be5ec38964ce
sha256: 66b1a035b32618c98d55be3648596b80dddd449f6d85375327a43e6025c0de06
sha512: 6f634b9a0927bb6a56476f941c46cd0138e385d1cb8fe5e60c2d12b65802a756abacd3a2ad5a95d421aca55e6b365369ae10b478b5edc19a750698ac9d600e3c
ssdeep: 98304:d1QT4QzW3QVbcCVl4TjsIl65Lngs+ncP25:rH3QVYCVWTjL4B+cK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: rcjBackup                                                   
ProductVersion: 1.3.2.5                                           
FileDescription: rcjBackup Setup                                             
OriginalFileName:                                                   
Translation: 0x0000 0x04b0

Trojan.Win32.Chrop.ahb also known as:

How to remove Trojan.Win32.Chrop.ahb?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.