Categories: CrackRisk

VHO:RiskTool.Win32.ProcPatcher information

The VHO:RiskTool.Win32.ProcPatcher is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VHO:RiskTool.Win32.ProcPatcher virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine VHO:RiskTool.Win32.ProcPatcher?


File Info:
name: 71A489CD6976AE087785.mlwpath: /opt/CAPEv2/storage/binaries/477d818edae65f5b8053bec6402681f7ca7f3a600fa0a6a1488bd5ededb30c81crc32: 01B4953Dmd5: 71a489cd6976ae087785c3d3ac1402fdsha1: d49845fce2d5f4c127ffb3cdaadc5a5735c4e24esha256: 477d818edae65f5b8053bec6402681f7ca7f3a600fa0a6a1488bd5ededb30c81sha512: e3d205a91c6799d74e5968015092e9d0b630261dade5a9dc9baa3e7a279a34e4bf823b10947b4fa06705bacda7ceae9bdc93165884594e64b0e3e2ba4d0de3d6ssdeep: 49152:FKBc1Q5sO9P94YZWJjs/zuuwx/YUgEtbaNS/vQnNmptE0cu39q:FKBdeO92KWJjsbuhxAUg6OPncXE0cu3Ytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10BB523421F52DAA4DC9D1830EB6AA0997A735CCE94C070176DC4FBD9EB78FC38A4069Dsha3_384: 14e5902adacbe129687d340d55386b03074f7f801bfeb4d6c6652bc6dcceff736e612755a6834494e45ed2ae535c7ceeep_bytes: 60be009067008dbe0080d8ff57eb0b90timestamp: 2024-04-27 09:42:24
Version Info:
FileVersion: 1.0.23.0FileDescription: 多网盘批量管理工具ProductName: PanToolsProductVersion: 1.0.23.0CompanyName: 国王软件LegalCopyright: Copyright @ 2024 KingSoftware www.52king.vipComments: 国王软件Translation: 0x0804 0x04b0

VHO:RiskTool.Win32.ProcPatcher also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Jaik.124397
FireEye	Generic.mg.71a489cd6976ae08
Skyhigh	BehavesLike.Win32.Generic.vc
ALYac	Gen:Variant.Jaik.124397
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
McAfee	Artemis!71A489CD6976
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	not-a-virus:VHO:RiskTool.Win32.ProcPatcher.gen
BitDefender	Gen:Variant.Jaik.124397
Emsisoft	Gen:Variant.Jaik.124397 (B)
Google	Detected
VIPRE	Gen:Variant.Jaik.124397
Trapmine	malicious.high.ml.score
Sophos	Generic Reputation PUA (PUA)
Paloalto	generic.ml
GData	Win32.Trojan.PSE.1BS1OJ0
Varist	W32/Trojan.CLL.gen!Eldorado
MAX	malware (ai score=84)
Antiy-AVL	RiskWare/Win32.FlyStudio.a
Gridinsoft	Trojan.Win32.Packed.sa
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Jaik.D1E5ED
ZoneAlarm	not-a-virus:VHO:RiskTool.Win32.ProcPatcher.gen
Microsoft	Trojan:Win32/Phonzy.B!ml
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.36804.woKfaCm1gfbb
VBA32	BScope.TrojanDownloader.Banload
Cylance	unsafe
Rising	Hacktool.ProcPatcher!8.13AE2 (CLOUD)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.PHP!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Jaik.Gen