What is “VHO:Trojan-Downloader.Win32.Upatre.izhi”?

The VHO:Trojan-Downloader.Win32.Upatre.izhi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VHO:Trojan-Downloader.Win32.Upatre.izhi virus can do?

• The binary likely contains encrypted or compressed data.

How to determine VHO:Trojan-Downloader.Win32.Upatre.izhi?

File Info:
crc32: BF1E42B5
md5: 9499dac59e041d057327078ccada8329
name: 9499DAC59E041D057327078CCADA8329.mlw
sha1: 707088977b09835d2407f91f4f6dbe4a4c8f2fff
sha256: ca607b3f03dd62f3ac9648087f30f502540be9944ef38b3ca622c2b9bcef06b9
sha512: 9d78de87d752902587a77d410de012b626dabf5d3a8576f90a9f1056f7a9866a442132defb3b99f2a12346571bcec29dccad5c27cdd59222a51518ceab3fc397
ssdeep: 12288:jx1vJgpzeLkTqhqeEmC7QOSaeeei7fqiHf:H+zIkTgqeEVQOfeess
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: CALC
FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.3.9600.16384
FileDescription: Windows Calculator
OriginalFilename: CALC.EXE
Translation: 0x0409 0x04b0

VHO:Trojan-Downloader.Win32.Upatre.izhi also known as:

How to remove VHO:Trojan-Downloader.Win32.Upatre.izhi?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.