How to remove “Win32:Patched-HO [Trj]”?

The Win32:Patched-HO [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Patched-HO [Trj] virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Win32:Patched-HO [Trj]?


File Info:
crc32: B947CBE4
md5: 98bc016ed4ebde7aa10edea2ce734686
name: 98BC016ED4EBDE7AA10EDEA2CE734686.mlw
sha1: a741e747b2ea0e434b51055513082c9dd7860a68
sha256: 7f19563963010a5e46b4bc438683bc4ced0b7cee8978718c36f8e90349a91204
sha512: 6d354e99cd2ebf9aa04f593b2428bbf266e3963bac3a8456780499fc652b587ef19f4e4330aa22f6439222f0ddbd9394c7b795a4c154264b86f8be5f70b89c90
ssdeep: 24576:aU2LYz6vLzthvaLoG6cmQlhekL6I96TCGslLNakm5WTB7BXWek+:aU2NL7viofcflhekL+CG8xm5WTzPz
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright 2016 Google Inc. All rights reserved.
InternalName: setup
CompanyShortName: Google
FileVersion: 59.0.3071.115
CompanyName: Google Inc.
ProductShortName: Chrome Installer
ProductName: Google Chrome Installer
LastChange: 3cf8514bb1239453fd15ff1f7efee389ac9df8ba-refs/branch-heads/3071@#820
ProductVersion: 59.0.3071.115
FileDescription: Google Chrome Installer
Official Build: 1
Translation: 0x0409 0x04b0

Win32:Patched-HO [Trj] also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop3.48024
ClamAV	Win.Worm.Arem-9881524-0
CAT-QuickHeal	W64.Slugin.CR6
ALYac	Win32.SlugIn.A.Dam
Cylance	Unsafe
Sangfor	Virus.Win32.Slugin.8
CrowdStrike	win/malicious_confidence_70% (D)
Baidu	Win32.Trojan-Proxy.Agent.f
Cyren	W32/Slugin.A.gen!Eldorado
Symantec	Trojan.Gen.6
Avast	Win32:Patched-HO [Trj]
BitDefender	Win32.SlugIn.A.Dam
NANO-Antivirus	Trojan.Win32.Slugin.rgpjj
MicroWorld-eScan	Win32.SlugIn.A.Dam
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Slugin.a!dll (fs)
McAfee-GW-Edition	BehavesLike.Win64.Virus.th
FireEye	Generic.mg.98bc016ed4ebde7a
Emsisoft	Win32.SlugIn.A.Dam (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.SlugIn.A.Dam
MAX	malware (ai score=84)
Malwarebytes	Nimnul.Virus.FileInfector.DDS
Panda	Trj/CI.A
Ikarus	Virus.Win32.Slugin
Fortinet	W32/Slugin.A
AVG	Win32:Patched-HO [Trj]
Paloalto	generic.ml

How to remove Win32:Patched-HO [Trj]?

Win32:Patched-HO [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X