How to remove “VHO:Trojan.Win32.Exnet”?

The VHO:Trojan.Win32.Exnet is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VHO:Trojan.Win32.Exnet virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine VHO:Trojan.Win32.Exnet?


File Info:
name: 8188479304A141CBA829.mlw
path: /opt/CAPEv2/storage/binaries/3310d7510e1188131e4dd0fd94a290dedd9d05fa428f606f9ce0cae58553680e
crc32: FC12785C
md5: 8188479304a141cba82922bf3e1cc2df
sha1: 93de911c9da6c8dbf76ebef89a219a2e1c3ad78f
sha256: 3310d7510e1188131e4dd0fd94a290dedd9d05fa428f606f9ce0cae58553680e
sha512: b26cb53c259b81e38af741b0c2d7cfc21ab581ad59a1d846f85b8823af1f6a9fa655ac76813b403d30a86220d909d07bc9576a9e4dbe617d0e829dc76265aa78
ssdeep: 12288:yigxB2LAXKHQCpilatnTmbeHgaUDRTPc1rYAOgvdQx:tgL2sR/ooRTc5YDgvY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E0D42365FA41C03AC2CD9B3C5A51FF7CA1338CAA7F0109273FDEBF853919612684A565
sha3_384: 5bc9dafc0049b240265e1363baaee1814c2e6a30731852d7cd686e6a1d32879afb8308fe7c5a2bebf12b99b7f0adf7ed
ep_bytes: 558bec6aff6898204000681017400064
timestamp: 2005-01-22 11:04:43

Version Info:
0: [No Data]

VHO:Trojan.Win32.Exnet also known as:

FireEye	Generic.mg.8188479304a141cb
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.ins
Cybereason	malicious.c9da6c
BitDefenderTheta	Gen:NN.ZexaF.34682.NuW@aqyeH0oi
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	VHO:Trojan.Win32.Exnet.gen
NANO-Antivirus	Trojan.Win32.Ursu.hwzrck
Avast	Win32:Evo-gen [Trj]
McAfee-GW-Edition	GenericRXHY-ML!8188479304A1
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
Jiangmin	Trojan.Multi.dhy
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C3315506
McAfee	GenericRXHY-ML!8188479304A1
VBA32	Trojan.Wacatac
Yandex	Trojan.GenAsa!q2cmqesxY7w
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove VHO:Trojan.Win32.Exnet?

VHO:Trojan.Win32.Exnet removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X