Adware.DotDo.NSIS (file analysis)

The Adware.DotDo.NSIS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.DotDo.NSIS virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Adware.DotDo.NSIS?


File Info:
crc32: 88AC6DB7
md5: d99978835ee28e1900f61fb8c1faca48
name: D99978835EE28E1900F61FB8C1FACA48.mlw
sha1: 564dcd37486e41166b0c259846895c7d643f950f
sha256: 1deabff9ce805a67603d667cc08910a913259b83e703c122b35aa279d211a418
sha512: d274e8763fac741a4dd052a37e0cf3b5234234250c1c1032cc20e413939c659ff26959bee6a0267ea3eae81a7bb81131aa74d3d0e600a5fd39967e5eabf5d0bf
ssdeep: 1536:6nw8RSijDtSA5xeZ0DbBCcK+MYOXllqllllllclaN/vVbkI:ewDijpS4DbYcD719bkI
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Adware.DotDo.NSIS also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.40056844
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win32/Dotdo.a6096f97
Cybereason	malicious.35ee28
Symantec	PUA.Downloader
ESET-NOD32	Win32/Adware.Dotdo.R
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	HEUR:Trojan.Win32.Agent.gen
BitDefender	Trojan.GenericKD.40056844
NANO-Antivirus	Trojan.Nsis.Dotdo.ewurof
MicroWorld-eScan	Trojan.GenericKD.40056844
Tencent	Win32.Trojan.Generic.Wtdp
Ad-Aware	Trojan.GenericKD.40056844
Sophos	Generic PUA FG (PUA)
Comodo	ApplicUnwnt@#369h8xd49etnu
McAfee-GW-Edition	BehavesLike.Win32.AdwareDotDo.km
FireEye	Generic.mg.d99978835ee28e19
Emsisoft	Trojan.GenericKD.40056844 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1108500
Microsoft	Trojan:Win32/Occamy.C
GData	Trojan.GenericKD.40056844
McAfee	Artemis!D99978835EE2
MAX	malware (ai score=85)
VBA32	Trojan.Agent
Malwarebytes	Adware.DotDo.NSIS
Panda	Trj/CI.A
Rising	Adware.Dotdo/NSIS!1.B0DB (CLASSIC)
Fortinet	NSIS/Agent.GU!tr
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Adware.DotDo.NSIS?

Adware.DotDo.NSIS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X