VHO:Trojan-Downloader.Win32.PsDownload malicious file

The VHO:Trojan-Downloader.Win32.PsDownload is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VHO:Trojan-Downloader.Win32.PsDownload virus can do?

Anomalous binary characteristics

How to determine VHO:Trojan-Downloader.Win32.PsDownload?


File Info:
crc32: 3BD9C6B2
md5: 02ac2428458d57e023b43706a642f9c7
name: 02AC2428458D57E023B43706A642F9C7.mlw
sha1: 6c0d1c47cea6272493079d7c80b204de95641ddf
sha256: b245e78e928cc91b18ca752fc47bb1cd89d247f1e1e9c91cdee8039aebc55a77
sha512: fb1a1e752361c4f09de01b58929ae0ff29c0a694721ecde6ba2ceee26d560381646dd988537a2adf74b3b5ead674bf7db6dfbf786ad7376caf4a961c078ccf16
ssdeep: 3072:qbhZbo1wuSUcEWz+jkBlRG1IRZTbVM1tKe5rJQyJ7UwfdSZmC5cfEJsz6CaAX:qVZcG6jkpRta1Qe5rqmCrcaAX
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Alicia Enstrom
InternalName: M1BWS9R92I
FileVersion: 1.0
CompanyName: Barker INC.
ProductName: M1BWS9R92I
ProductVersion: 1.0
FileDescription: Lorem ipsum dolor sit amet, consecteteur adipiscing elit.
OriginalFilename: lan8080shell.exe
Translation: 0x0409 0x04e4

VHO:Trojan-Downloader.Win32.PsDownload also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Kryptik.79
BitDefender	Gen:Variant.Kryptik.79
Cybereason	malicious.8458d5
Symantec	Trojan.PowStage
Kaspersky	VHO:Trojan-Downloader.Win32.PsDownload.gen
MicroWorld-eScan	Gen:Variant.Kryptik.79
Ad-Aware	Gen:Variant.Kryptik.79
FireEye	Gen:Variant.Kryptik.79
Emsisoft	Gen:Variant.Kryptik.79 (B)
Arcabit	Trojan.Kryptik.79
GData	Gen:Variant.Kryptik.79
MAX	malware (ai score=85)
Malwarebytes	Malware.AI.890027830
Ikarus	Trojan.Win64.Crypt

How to remove VHO:Trojan-Downloader.Win32.PsDownload?

VHO:Trojan-Downloader.Win32.PsDownload removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X