Categories: Crack

What is “W32.Patchload.O”?

The W32.Patchload.O is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What W32.Patchload.O virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine W32.Patchload.O?


File Info:

name: 74A3A599C2A1EA26AD02.mlwpath: /opt/CAPEv2/storage/binaries/2e1aeb288017f08b11c2052ee747a6827b2d427ebc906d911ae9ed9be453bcfbcrc32: 3D968279md5: 74a3a599c2a1ea26ad029bca649eb7eesha1: 0b2e6c2f16f9fd0871e306dcd07696c45d4dc3eesha256: 2e1aeb288017f08b11c2052ee747a6827b2d427ebc906d911ae9ed9be453bcfbsha512: 36b56763506414655deddd7fbaa25269ffff765b354c3e996a487c3173166a5a19686cdde7f1ca324aa3097df5e2d762fa37eea22a894345389e4eb0b5d4693cssdeep: 1536:rxIqyxFj4nS+xuPIn6+VsvF9KPMqCQEInGc67N6:rE4S+VfMqCQEInGn7N6type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11A732B0B3BD5CAB9E16355B21F780B76B3F7E01488BD0D4323D8152BBE74A825E36919sha3_384: 77714cbd993ff576cd55e26c65244b10b21ded7771e17217787182c14662b75ac47748551431700d3d5c11c6972c1925ep_bytes: 6836844000e934060000e80f00000043timestamp: 2004-01-05 23:59:47

Version Info:

LegalTrademarks: Microsoft (R) is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation.CompanyName: Microsoft CorporationLegalCopyright: Copyright (C) Microsoft Corp. 1998. All rights reserved.ProductName: PKMFileDescription: Microsoft PKM Search ServiceInternalName: mssearch.exeFileVersion: 9.107.8320.4Comments: Microsoft PKM Search ServiceProductVersion: 9.107.8320.4OriginalFilename: mssearch.exeTranslation: 0x0409 0x04b0

W32.Patchload.O also known as:

Bkav W32.PatchedZB.PE
Lionic Trojan.Win32.Patched.lnqW
DrWeb Trojan.Starter.1695
MicroWorld-eScan Trojan.Patched.HE
FireEye Trojan.Patched.HE
CAT-QuickHeal W32.Patchload.O
McAfee W32/Katusha
Malwarebytes Malware.AI.471752596
K7AntiVirus Trojan ( 0026f5d91 )
K7GW Trojan ( 0026f5d91 )
Cybereason malicious.9c2a1e
BitDefenderTheta Gen:NN.ZexaF.34646.em0@aSJANoai
VirIT Win32.Yoshi.E
Cyren W32/Patched.G
Symantec Trojan.Paccyn!inf
Elastic malicious (high confidence)
ESET-NOD32 Win32/Patched.HN
Zoner Probably Heur.ExeHeaderL
APEX Malicious
ClamAV Win.Trojan.Patched-143
Kaspersky Trojan.Win32.Patched.mf
BitDefender Trojan.Patched.HE
NANO-Antivirus Trojan.Win32.Patched.dwgwe
Avast Win32:Patched-WQ [Trj]
Tencent Virus.Win32.Patched.mf
Ad-Aware Trojan.Patched.HE
Emsisoft Trojan.Patched.HE (B)
Comodo TrojWare.Win32.Patched.HN@3bsert
F-Secure Malware.W32/Patchload.A
Baidu Win32.Virus.Loader.l
VIPRE Trojan.Patched.HE
TrendMicro PTCH_KATUSHA.W
McAfee-GW-Edition BehavesLike.Win32.Virut.lm
Sophos W32/Patched-AL
GData Trojan.Patched.HE
Jiangmin TrojanSpy.Zbot.adxr
Google Detected
Avira W32/Patchload.A
MAX malware (ai score=84)
Antiy-AVL Trojan/Win32.Patched.mf
Arcabit Trojan.Patched.HE
ViRobot Win32.Patched.BE
ZoneAlarm Trojan.Win32.Patched.mf
Microsoft Virus:Win32/Patchload.O
Cynet Malicious (score: 99)
AhnLab-V3 Win-Trojan/Patched.DD
VBA32 Trojan-Spy.Zbot.gen
ALYac Trojan.Patched.HE
TACHYON Virus/W32.Patched.Gen
Cylance Unsafe
TrendMicro-HouseCall PTCH_KATUSHA.W
Rising Virus.Loader!1.9B09 (CLASSIC)
Yandex Win32.Katusha.Gen
Ikarus Virus.Win32.Virut
MaxSecure Virus.W32.Patched.MF
Fortinet W32/Patched.MF!tr
AVG Win32:Patched-WQ [Trj]
Panda W32/Katusha.BN
CrowdStrike win/malicious_confidence_60% (W)

How to remove W32.Patchload.O?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Virus:Win32/Memery.HNS!MTB removal tips

The Virus:Win32/Memery.HNS!MTB is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Trojan:MSIL/DCRat.RDJ!MTB (file analysis)

The Trojan:MSIL/DCRat.RDJ!MTB is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

How to remove “Virus:Win32/Expiro.L”?

The Virus:Win32/Expiro.L is considered dangerous by lots of security experts. When this infection is active,…

41 mins ago

Trojan:MSIL/Formbook.AMBA!MTB removal instruction

The Trojan:MSIL/Formbook.AMBA!MTB is considered dangerous by lots of security experts. When this infection is active,…

51 mins ago

Should I remove “Trojan-PSW.Win32.CoinStealer.bh”?

The Trojan-PSW.Win32.CoinStealer.bh is considered dangerous by lots of security experts. When this infection is active,…

55 mins ago

WebWatcher.Spyware.Monitor.DDS removal

The WebWatcher.Spyware.Monitor.DDS is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago