Should I remove “HackTool:Win32/DoorH.A!dha”?

The HackTool:Win32/DoorH.A!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:Win32/DoorH.A!dha virus can do?

Authenticode signature is invalid

How to determine HackTool:Win32/DoorH.A!dha?


File Info:
name: 70419C9AA8193BA6DC3D.mlw
path: /opt/CAPEv2/storage/binaries/8598faada45830a7f1a343cc329bf6996bd1197cb002609e65ba82ed5c8e3358
crc32: 1FAAEC84
md5: 70419c9aa8193ba6dc3dfd4279434d74
sha1: 2fa5eb51a8a3ed78b2a6b4fb21dddcf47012090b
sha256: 8598faada45830a7f1a343cc329bf6996bd1197cb002609e65ba82ed5c8e3358
sha512: 3fe4315c71af9648656ee5b9e9df2f2da5bc1a7fb2736fe28232d347534d7dc2ac5d513e56263a7967f3a2259a96333217fd252784eb83741e8344e36dea5b81
ssdeep: 768:Wy3WQJ6XrDHfshqTAq+QEHZujXPKtx/zaaJGErmBec9:Ws6XnHfshqMq+F5uj/KtB9Jndc9
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T125E25D4FBA891155C14101301BA3672ADEB7E97A2E502616FF2CA35C2F3DD82F8F5686
sha3_384: efc97b3221fceaece665999841b72b7b45800f8c24d80605d88a083ae244edd843bd60188a5dd84cacb849a4db93165b
ep_bytes: 558bec6aff6858624000684655400064
timestamp: 2013-08-23 09:21:15

Version Info:
0: [No Data]

HackTool:Win32/DoorH.A!dha also known as:

Lionic	Hacktool.Win32.BruteForce.3!c
Skyhigh	PUP-XDG-CP
McAfee	PUP-XDG-CP
Malwarebytes	Generic.Malware/Suspicious
Zillya	Tool.BruteForce.Win32.932
Sangfor	Hacktool.Win32.Agent.Vwy3
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	HackTool:Win32/BruteForce.7884baa8
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	Hacktool
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/HackTool.Agent.NEY
APEX	Malicious
NANO-Antivirus	Trojan.Win32.BruteForce.elmrqw
Tencent	Win32.Hacktool.Bruteforce.Jajl
TrendMicro	TROJ_GEN.R002C0OBJ24
Trapmine	suspicious.low.ml.score
Jiangmin	HackTool/BruteForce.ki.a
MAX	malware (ai score=100)
Antiy-AVL	HackTool/Win32.BruteForce
Kingsoft	Win32.HackTool.BruteForce.bgj
Microsoft	HackTool:Win32/DoorH.A!dha
Xcitium	Malware@#cj0nnxd3q62i
ViRobot	Trojan.Win32.U.Agent.39656
AhnLab-V3	Trojan/Win32.Remoteaccess.C1780121
TACHYON	Trojan/W32.BruteForce.31232
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0OBJ24
Rising	HackTool.BruteForce!8.762 (TFE:5:b2bCVcsM5HR)
Yandex	Riskware.HackTool!DXP6VncFjnw
MaxSecure	Trojan.Malware.11608197.susgen
Fortinet	Riskware/BruteForce
DeepInstinct	MALICIOUS
alibabacloud	Trojan.Win.UnkAgent

How to remove HackTool:Win32/DoorH.A!dha?

HackTool:Win32/DoorH.A!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X