Trojan

VHO:Trojan.Win32.StrongPity removal guide

Malware Removal

The VHO:Trojan.Win32.StrongPity is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VHO:Trojan.Win32.StrongPity virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the StrongPity malware family
  • Anomalous binary characteristics

How to determine VHO:Trojan.Win32.StrongPity?


File Info:

name: 84375E0AE194CFAA92C6.mlw
path: /opt/CAPEv2/storage/binaries/1469ee76472c3aec34860abff179855b5ac55daa784f446ff1f2e2b1d5f00d6f
crc32: 4A9A4D3B
md5: 84375e0ae194cfaa92c626068dcd4151
sha1: 92a15868d493782414345a1d95f83d56d73bcd7d
sha256: 1469ee76472c3aec34860abff179855b5ac55daa784f446ff1f2e2b1d5f00d6f
sha512: 3ca54e24cc15b80033e6097c1711ec57a41b8aa0c28aed71c81fb1d9ccde96488ade6efa860a86e4b069e2356556ca2410683477aed915e3ddbfae63d7b38af5
ssdeep: 3072:k9vGGWmvVBhgPxB7FIZSv/yKupipTRVNde/x6/Aw1RZzFPk2I111KYTI1Uk13Fr:wGGW6gPxBFv7eRwhHMzTy1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B4149D42B4C1A571D97A0E308571C9E14A3EF8716E648D9B33D8223E9EB52D1A633F37
sha3_384: c2a059ff77415c710d3d0b02e262be9819121c6fc15f709b0198cd1a0d1dc0ba55861804900b7d8c82977fd73a979a06
ep_bytes: 8bec609ce9b2c20100ff558bec6a00ff
timestamp: 2019-02-04 10:42:26

Version Info:

0: [No Data]

VHO:Trojan.Win32.StrongPity also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
ClamAVWin.Trojan.StrongPity-7124525-0
CylanceUnsafe
SangforSuspicious.Win32.Save.a
Cybereasonmalicious.8d4937
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/StrongPity3.A
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.StrongPity.gen
ViRobotTrojan.Win32.StrongPity.110928.H
AvastWin32:Evo-gen [Trj]
DrWebTrojan.Siggen16.11550
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.84375e0ae194cfaa
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.StrongPity.cu
AviraTR/Crypt.EPACK.Gen2
Antiy-AVLTrojan/Win32.StrongPity
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
Acronissuspicious
MalwarebytesMalware.AI.4009718011
RisingTrojan.APosT!8.E271 (TFE:5:Pcz8Xm9PLAT)
YandexTrojan.GenAsa!rCFWRKPr900
BitDefenderThetaGen:NN.ZexaF.34796.lyW@auFrW3ai
AVGWin32:Evo-gen [Trj]
PandaTrj/GdSda.A

How to remove VHO:Trojan.Win32.StrongPity?

VHO:Trojan.Win32.StrongPity removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment