Should I remove “Trojan:Win32/ChChes.A!dha”?

The Trojan:Win32/ChChes.A!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/ChChes.A!dha virus can do?

Unconventionial language used in binary resources: Chinese (Traditional)
Authenticode signature is invalid

How to determine Trojan:Win32/ChChes.A!dha?


File Info:
name: 05449E3CF33249868107.mlw
path: /opt/CAPEv2/storage/binaries/1e1880f3f7e1a8aece2aebb538d3f3124407b692b8ef38fa1e4623e27deffd7f
crc32: 3A4010F5
md5: 05449e3cf33249868107bdb166277218
sha1: 322d7cbf00629e360f8663e897a0c873ca76e9d6
sha256: 1e1880f3f7e1a8aece2aebb538d3f3124407b692b8ef38fa1e4623e27deffd7f
sha512: 6a22e210eace1e032b7f41ab5bdbe1d19a4a94cc11d5b723ca081de13cd105436e11d43f3bbbe92461da2cc941904762211f7a53ad2a69180d93bfb7b2c01343
ssdeep: 12288:yBSgAf5k0VOgl/oI0UdV8q3oL61c/btQ:WSgAfpd/oIHDc/bu
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1E7844B13BBDC807EC02E13313798B7C167FDF5641D67ED67E714669E2AB28878910A82
sha3_384: 18d0e0369bf6a3f972ce1a30b4dfa8d05d1099bf47eb1522c8617d50b6c67cc5812377c179a550eef2d4fff4c7b67335
ep_bytes: 558bec837d0c017505e8d8060000ff75
timestamp: 2022-07-07 00:53:47

Version Info:
CompanyName: 
FileDescription: CX_RFWiseOrderSlim DLL
FileVersion: 1, 0, 0, 1
InternalName: CX_RFWiseOrderSlim
LegalCopyright: Copyright (C) 2008
LegalTrademarks: 
OriginalFilename: CX_RFWiseOrderSlim.DLL
ProductName: CX_RFWiseOrderSlim Dynamic Link Library
ProductVersion: 1, 0, 0, 1
OLESelfRegister: 
Translation: 0x0404 0x04b0

Trojan:Win32/ChChes.A!dha also known as:

Bkav	W32.Common.6C1B2987
Lionic	Trojan.Win32.ChChes.4!c
MicroWorld-eScan	Trojan.GenericKD.67286591
FireEye	Trojan.GenericKD.67286591
Skyhigh	RDN/Generic.hbg
McAfee	RDN/Generic.hbg
Cylance	unsafe
Arcabit	Trojan.Generic.D402B63F
BitDefender	Trojan.GenericKD.67286591
Sophos	Mal/Generic-S
VIPRE	Trojan.GenericKD.67286591
Emsisoft	Trojan.GenericKD.67286591 (B)
Webroot	W32.Trojan.GenKD
Google	Detected
Varist	W32/ABTrojan.PWGI-6473
Antiy-AVL	Trojan/Win32.Chches
Microsoft	Trojan:Win32/ChChes.A!dha
GData	Trojan.GenericKD.67286591
ALYac	Trojan.GenericKD.67286591
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.4243509301
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09KJ22
Rising	Trojan.ChChes!8.E4D5 (CLOUD)
MaxSecure	Trojan.Malware.194387437.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/ChChes.A!dha?

Trojan:Win32/ChChes.A!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X