What is “VHO:Backdoor.Win32.Hupigon”?

The VHO:Backdoor.Win32.Hupigon is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VHO:Backdoor.Win32.Hupigon virus can do?

Unconventionial binary language: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine VHO:Backdoor.Win32.Hupigon?


File Info:
crc32: 31C86E14
md5: 01925c1108edf5d7c0b2f2710a676158
name: 01925C1108EDF5D7C0B2F2710A676158.mlw
sha1: 91460d70c04cfe56f8e445d361ec335d9cd9a5a5
sha256: 30ebc19a6c913cd81cb558b4076a38852627782f19a8db58fdc05ca3794a7b1d
sha512: 6b62777712f7b1f417f8c5e676d2a58334ddf1f019bfb929afc016b565c0f89606c5c1a14eeb22d6fd8822f0d7a8c77d5306468bdb31d22920b7a3ed91360457
ssdeep: 6144:h8rV/L6OMrOIgIwiAeiEVi+Sbl4gDQM/I6kaLTlm0psRJWMTPfrv3DVxY:+x/L6OMCINhS4pYsoOWgbfDVxY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 1.2.3.10
CompanyName: x51e4x51f0x5de5x4f5cx5ba4
Comments: x7070x9e3dx5b50x8fdcx7a0bx7ba1x7406
ProductVersion: 1.2.3.0
FileDescription: x51e4x51f0x5de5x4f5cx5ba4
OriginalFilename: H_Client.exe
Translation: 0x0804 0x03a8

VHO:Backdoor.Win32.Hupigon also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Trojan.Heur.um0@rzIgfkiak
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Backdoor:Win32/Hupigon.4b086b84
Cybereason	malicious.108edf
Cyren	W32/Troj_Obfusc.N.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Dogrobot [Drp]
Kaspersky	VHO:Backdoor.Win32.Hupigon.gen
BitDefender	Gen:Trojan.Heur.um0@rzIgfkiak
MicroWorld-eScan	Gen:Trojan.Heur.um0@rzIgfkiak
Ad-Aware	Gen:Trojan.Heur.um0@rzIgfkiak
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Kryptik.~NNZ@1qgexn
BitDefenderTheta	AI:Packer.2F64D0D41D
TrendMicro	TROJ_GEN.R005C0PET21
McAfee-GW-Edition	Generic Malware.bj
FireEye	Generic.mg.01925c1108edf5d7
Emsisoft	Gen:Trojan.Heur.um0@rzIgfkiak (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Heur:Backdoor/Huigezi
Webroot	W32.Downloader.Gen
Avira	BDS/Hupigon.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Trojan.Heur!.020121E1
GData	Gen:Trojan.Heur.um0@rzIgfkiak
AhnLab-V3	Backdoor/Win32.Hupigon.R839
Acronis	suspicious
McAfee	Generic Malware.bj
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.1626110794
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R005C0PET21
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazqu/Y7b8PzZ9TlSNy3UGaZI)
Ikarus	Backdoor.Win32.Hupigon
Fortinet	W32/Malware.BJ!tr
AVG	Win32:Dogrobot [Drp]
Paloalto	generic.ml

How to remove VHO:Backdoor.Win32.Hupigon?

VHO:Backdoor.Win32.Hupigon removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X