Crack • Risk

VHO:RiskTool.Win32.ProcPatcher information

Malware Removal

The VHO:RiskTool.Win32.ProcPatcher is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What VHO:RiskTool.Win32.ProcPatcher virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara detections observed in process dumps, payloads or dropped files

How to determine VHO:RiskTool.Win32.ProcPatcher?



File Info:

name: 71A489CD6976AE087785.mlw
path: /opt/CAPEv2/storage/binaries/477d818edae65f5b8053bec6402681f7ca7f3a600fa0a6a1488bd5ededb30c81
crc32: 01B4953D
md5: 71a489cd6976ae087785c3d3ac1402fd
sha1: d49845fce2d5f4c127ffb3cdaadc5a5735c4e24e
sha256: 477d818edae65f5b8053bec6402681f7ca7f3a600fa0a6a1488bd5ededb30c81
sha512: e3d205a91c6799d74e5968015092e9d0b630261dade5a9dc9baa3e7a279a34e4bf823b10947b4fa06705bacda7ceae9bdc93165884594e64b0e3e2ba4d0de3d6
ssdeep: 49152:FKBc1Q5sO9P94YZWJjs/zuuwx/YUgEtbaNS/vQnNmptE0cu39q:FKBdeO92KWJjsbuhxAUg6OPncXE0cu3Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10BB523421F52DAA4DC9D1830EB6AA0997A735CCE94C070176DC4FBD9EB78FC38A4069D
sha3_384: 14e5902adacbe129687d340d55386b03074f7f801bfeb4d6c6652bc6dcceff736e612755a6834494e45ed2ae535c7cee
ep_bytes: 60be009067008dbe0080d8ff57eb0b90
timestamp: 2024-04-27 09:42:24


Version Info:

FileVersion: 1.0.23.0
FileDescription: 多网盘批量管理工具
ProductName: PanTools
ProductVersion: 1.0.23.0
CompanyName: 国王软件
LegalCopyright: Copyright @ 2024 KingSoftware www.52king.vip
Comments: 国王软件
Translation: 0x0804 0x04b0

VHO:RiskTool.Win32.ProcPatcher also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.Jaik.124397
FireEyeGeneric.mg.71a489cd6976ae08
SkyhighBehavesLike.Win32.Generic.vc
ALYacGen:Variant.Jaik.124397
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
McAfeeArtemis!71A489CD6976
AvastWin32:TrojanX-gen [Trj]
Kasperskynot-a-virus:VHO:RiskTool.Win32.ProcPatcher.gen
BitDefenderGen:Variant.Jaik.124397
EmsisoftGen:Variant.Jaik.124397 (B)
GoogleDetected
VIPREGen:Variant.Jaik.124397
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
Paloaltogeneric.ml
GDataWin32.Trojan.PSE.1BS1OJ0
VaristW32/Trojan.CLL.gen!Eldorado
MAXmalware (ai score=84)
Antiy-AVLRiskWare/Win32.FlyStudio.a
GridinsoftTrojan.Win32.Packed.sa
XcitiumPacked.Win32.MUPX.Gen@24tbus
ArcabitTrojan.Jaik.D1E5ED
ZoneAlarmnot-a-virus:VHO:RiskTool.Win32.ProcPatcher.gen
MicrosoftTrojan:Win32/Phonzy.B!ml
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.36804.woKfaCm1gfbb
VBA32BScope.TrojanDownloader.Banload
Cylanceunsafe
RisingHacktool.ProcPatcher!8.13AE2 (CLOUD)
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.PHP!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan:Win/Jaik.Gen

How to remove VHO:RiskTool.Win32.ProcPatcher?

VHO:RiskTool.Win32.ProcPatcher removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment