About "VHO:Trojan.Win32.Vilsel" infection

The VHO:Trojan.Win32.Vilsel is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VHO:Trojan.Win32.Vilsel virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

cssky.66rt.com

How to determine VHO:Trojan.Win32.Vilsel?


File Info:
crc32: 64F0CF16
md5: 4f6a8d2a003b60a8fe0d0d5bf110f01a
name: 4F6A8D2A003B60A8FE0D0D5BF110F01A.mlw
sha1: c16a0d697b5e5395cb13e7b06371b0fba92b0512
sha256: fb630992bc66f89e0bf221f5a1f67be6601758da57f32699e7da0d6f56f82576
sha512: 1a91572b6d63f1f4cb08b2fea12407a0fc16e95210fc328ac1cff4b5db509d56d966fa2d99cd522616436b7607db2f430bf0f0d85b42fd3e612ba9f52cd22672
ssdeep: 12288:V6S/YmEpC6mInrv0JcTArBEkeKYx0WEtFgD:9EpznrRTRkeKYx0WaFg
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: 2021
FileVersion: 1.0.0.0
CompanyName: HGJL
Comments: updata
ProductName: updata
ProductVersion: 1.0.0.0
FileDescription: updata
Translation: 0x0804 0x04b0

VHO:Trojan.Win32.Vilsel also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Cybereason	malicious.97b5e5
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Kaspersky	VHO:Trojan.Win32.Vilsel.gen
NANO-Antivirus	Virus.Win32.Agent.dvixmz
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34722.FmKfamWpSUeb
McAfee-GW-Edition	BehavesLike.Win32.Dropper.hc
FireEye	Generic.mg.4f6a8d2a003b60a8
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Flyagent.d
TrendMicro-HouseCall	TROJ_GEN.R005H06EV21
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazr2PUhIerPHfTJlrXCLuwfr)
Ikarus	Trojan.Tonmye
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.BELF!tr

How to remove VHO:Trojan.Win32.Vilsel?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “VHO:Trojan.Win32.Vilsel” infection