VHO:Trojan-PSW.Win32.Stealer.jlx malicious file

The VHO:Trojan-PSW.Win32.Stealer.jlx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VHO:Trojan-PSW.Win32.Stealer.jlx virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VHO:Trojan-PSW.Win32.Stealer.jlx?


File Info:
crc32: 09FDC483
md5: 2bfc63ab3b5110a281a0ed54f8a00782
name: 2BFC63AB3B5110A281A0ED54F8A00782.mlw
sha1: fbdf8f87c7b3ef4f0e1933c2f6f807f545b661f3
sha256: b3a3ae8ac94cb687fc0c797d0070b1eb123e2bb3fceed9530ca77c4d5fae5b27
sha512: 27342078e1e93607b758b23f8aeb5ec36080af23a4a86e7867409358f23656dfa6b761eeb866fe87a487da34ef257912d50bd8677ba6c9a669ddea51895bd30a
ssdeep: 12288:YIXJMJz7bLg0EKsWmAhndfnZs8svfozj/:12eQsWmAhBIvfozj/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: Svc_host.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Svc_host
ProductVersion: 1.0.0.0
FileDescription: Svc_host
OriginalFilename: Svc_host.exe

VHO:Trojan-PSW.Win32.Stealer.jlx also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Razy.914220
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
BitDefender	Gen:Variant.Razy.914220
Cybereason	malicious.7c7b3e
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan-PSW.Win32.Stealer.jlx
MicroWorld-eScan	Gen:Variant.Razy.914220
Ad-Aware	Gen:Variant.Razy.914220
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34110.Gy2@a4!QLPf
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.2bfc63ab3b5110a2
Emsisoft	Gen:Variant.Razy.914220 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Trojan.Generic
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Gridinsoft	Trojan.Heur!.01012031
GData	Win32.Trojan.PSE.1MFCAJH
AhnLab-V3	Trojan/Win.Generic.C4611711
Acronis	suspicious
McAfee	Artemis!2BFC63AB3B51
MAX	malware (ai score=87)
Malwarebytes	Spyware.PasswordStealer

How to remove VHO:Trojan-PSW.Win32.Stealer.jlx?

VHO:Trojan-PSW.Win32.Stealer.jlx removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

VHO:Trojan-PSW.Win32.Stealer.jlx malicious file