Downloader.Sogou information

The Downloader.Sogou is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.Sogou virus can do?

Executable code extraction
Presents an Authenticode digital signature
A process attempted to delay the analysis task.
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity contains more than one unique useragent.
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

yz.app.sogou.com

ping.t.sogou.com

How to determine Downloader.Sogou?


File Info:
crc32: 0F396D82
md5: f1501726fd50a8ce1f7b92e3aa3b003c
name: sogouja.e
sha1: 93461471536dea7a9c54dc1dceaeb0a9fffa20a8
sha256: 7bdfe420130f8b60207cc6e5cfe414dab5d2651cebe2c1e9694131bad9b0346d
sha512: d89edb2274e36691b9ab21059f79a50f603cc7a3af986f63d133bd82a843edfa088e91470d9c767eb3dd559f6c6d492e4717b6c2e868297ce24dc0d6877c5611
ssdeep: 49152:tuuE7AnqIxGrGYyZa/tgrYJUGfZC3wA6EylfwEaFWd:vE7AqrlyutLxC3sEwwMd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2014 Sogou.com Inc. All rights reserved.
InternalName: MiniDownLoad.exe
FileVersion: 3.1.12.94
CompanyName: Sogou.com Inc.
ProductName: x8f6fx4ef6x52a9x624b
ProductVersion: 3.1.12.94
FileDescription: x8f6fx4ef6x52a9x624b
OriginalFilename: MiniDownLoad.exe
Translation: 0x0804 0x04b0

Downloader.Sogou also known as:

Bkav	W32.HfsAdware.170E
FireEye	Generic.mg.f1501726fd50a8ce
CAT-QuickHeal	Trojan.MauvaiseRI.S5244821
McAfee	PUP-FTL
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Unwanted-Program ( 004cca081 )
K7GW	Unwanted-Program ( 004cca081 )
CrowdStrike	win/malicious_confidence_80% (D)
Invincea	heuristic
F-Prot	W32/Sogou.H.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Worm.Chir-2282
GData	Win32.Trojan.Agent.DF9LBH
Kaspersky	not-a-virus:Downloader.Win32.Sogou.g
Alibaba	Downloader:Win32/Sogou.de2e7b70
NANO-Antivirus	Trojan.Win32.Gbot.fgypno
Emsisoft	Application.Chindo (A)
Comodo	Application.Win32.Sogou.C@6e9656
F-Secure	Adware.ADWARE/Sogou.wqqyp
DrWeb	BackDoor.Gbot.2850
Zillya	Downloader.SogouCRTD.Win32.237
TrendMicro	TROJ_GEN.R002C0PBE20
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.vc
Sophos	Mal/Generic-S
Ikarus	not-a-virus:Downloader.Sogou
Cyren	W32/Sogou.H.gen!Eldorado
MaxSecure	Trojan.Malware.8608356.susgen
Avira	ADWARE/Sogou.wqqyp
Antiy-AVL	RiskWare[Downloader]/Win32.Sogou
Endgame	malicious (high confidence)
ZoneAlarm	not-a-virus:Downloader.Win32.Sogou.g
Microsoft	PUA:Win32/Sogou
AhnLab-V3	PUP/Win32.Downloader.R180775
VBA32	Downloader.Sogou
Malwarebytes	Adware.Sogou
Panda	PUP/Sogou
ESET-NOD32	a variant of Win32/Sogou.H potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002C0PBE20
Tencent	Malware.Win32.Gencirc.10b135f4
Yandex	PUA.Downloader!
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
AVG	Win32:Malware-gen

How to remove Downloader.Sogou?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Downloader.Sogou information