VHO:Packed.Win32.Convagent information

The VHO:Packed.Win32.Convagent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VHO:Packed.Win32.Convagent virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.

How to determine VHO:Packed.Win32.Convagent?


File Info:
crc32: 454760BB
md5: 9ba0c2a82b47b497f74a5d89f882168f
name: 9BA0C2A82B47B497F74A5D89F882168F.mlw
sha1: c85b9f798b3e31441ebf5db8d90a9155752f19a1
sha256: b33d8168ce9a505024c952df7d770f82cbb20cd94d7d2791f149d077e2f5a449
sha512: bd85a34d9f6d63851a04e77cc146445cf942eef8efbbba00f74cf9451a56220c89b6fc28ffbe95001339cc26b1052c496c1c6ee7402ae4552cc08f5a5e062d98
ssdeep: 24576:VGPgeTXXs9SmEQruxyuqOdaN4oF3KjaPo2b+d13dTgT0+FvH8rZVDNyhJ:VGPgeTESmEQJwaNFF3KjaPo0gzgPYZF
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

VHO:Packed.Win32.Convagent also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
ClamAV	Win.Malware.Agen-9837291-0
McAfee	Artemis!9BA0C2A82B47
Cylance	Unsafe
Sangfor	Riskware.Win32.Wacapew.C
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	VHO:Packed.Win32.Convagent.gen
BitDefender	Trojan.GenericKD.36706236
MicroWorld-eScan	Trojan.GenericKD.36706236
Ad-Aware	Trojan.GenericKD.36706236
Sophos	Generic PUA MI (PUA)
BitDefenderTheta	Gen:NN.ZedlaF.34678.Qz4@a0TVohp
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.9ba0c2a82b47b497
Emsisoft	Trojan.GenericKD.36706236 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Trojan.Heur!.02296020
AegisLab	Trojan.Win32.Malicious.4!c
GData	Trojan.GenericKD.36706236
AhnLab-V3	Trojan/Win.Generic.C4418445
Acronis	suspicious
MAX	malware (ai score=82)
Malwarebytes	Malware.AI.410809377
TrendMicro-HouseCall	TROJ_GEN.R002H09DH21
Rising	Malware.Convagent!8.1248C (CLOUD)
Fortinet	W32/PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove VHO:Packed.Win32.Convagent?

VHO:Packed.Win32.Convagent removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X