Malware

VHO:Exploit.Win32.BypassUAC.abxx removal guide

Malware Removal

The VHO:Exploit.Win32.BypassUAC.abxx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VHO:Exploit.Win32.BypassUAC.abxx virus can do?

  • Presents an Authenticode digital signature
  • Anomalous binary characteristics

How to determine VHO:Exploit.Win32.BypassUAC.abxx?


File Info:

crc32: 62D2A3A0
md5: cba619ceefd476c9cc3f35b5263e6276
name: CBA619CEEFD476C9CC3F35B5263E6276.mlw
sha1: 71e14fdd0904b6c0ff288c7ec6f8af5ebfcc6bf6
sha256: 69e7a10168bf96ba60f06987affd48857cd9cda1a518509f435b8b43110feacf
sha512: 6467919624791c50cbffecac220492110db42de43430fb8bd2b8668ef0aa9709982e8baa4d6d5cf099bd0ad08036ca8a36a3bf2df8ef1575d89266719530f6c4
ssdeep: 98304:DJIhjzhUmi32EM/H6ygOsEL2QwHFHB2ajjMtW2U2M:DJI5hOG/3gOSjHrjjjMtMz
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2014
Assembly Version: 1.0.0.0
InternalName: MdFieldIn.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: Sistema_Asistencia
ProductVersion: 1.0.0.0
FileDescription: Sistema_Asistencia
OriginalFilename: MdFieldIn.exe

VHO:Exploit.Win32.BypassUAC.abxx also known as:

CylanceUnsafe
CrowdStrikewin/malicious_confidence_80% (W)
Cybereasonmalicious.d0904b
KasperskyVHO:Exploit.Win32.BypassUAC.abxx
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftTrojan.Heur!.010100A3
MaxSecureTrojan.Malware.300983.susgen

How to remove VHO:Exploit.Win32.BypassUAC.abxx?

VHO:Exploit.Win32.BypassUAC.abxx removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment