Hoax.DoubleEagle removal tips

The Hoax.DoubleEagle is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Hoax.DoubleEagle virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Hoax.DoubleEagle?


File Info:
crc32: 041395AB
md5: cb336db32a0181bd9b45131213cf898b
name: CB336DB32A0181BD9B45131213CF898B.mlw
sha1: a2081020f6ee1b205a6fdc364a76fdd022a9fba8
sha256: db2161fb390ca8015c5d3101964ae444e59a2d3904cd7a760ad092ed093dd5af
sha512: b24f9843f44d2c73db5ea089cd84c5389ad8beae4b4d65a8d35ac9053703485314b3b3c02d0709f2c7e94226d39e6995fbd90fd3940c7a4937b1919939675e6f
ssdeep: 6144:Z/913+O8PUrdpKNiY091AkksjWimUylO4idHoxGQ2NEByHajAUP+JmF:Z2Obrdki19+mWi7Qly6jWm
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright (C) JrMasterModelBuilder
InternalName: restart
FileVersion: Voya Nui Online Game Restart
CompanyName: JrMasterModelBuilder
ProductVersion: Voya Nui Online Game Restart
PrivateBuild: 
LegalTrademarks: All rights reserved.
Comments: For restarting progress in Voya Nui Online Game only.
ProductName: Restart
SpecialBuild: 
Build: Voya Nui Online Game Restart
FileDescription: Voya Nui Online Game Restart
Users: Unlimited.
Support: JrMasterModelBuilder
OriginalFilename: restart.exe
Developer: JrMasterModelBuilder
Translation: 0x0409 0x04e4

Hoax.DoubleEagle also known as:

ClamAV	Win.Trojan.Doubleeagle-24
Cylance	Unsafe
Zillya	Trojan.DoubleEagle.Win32.319
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
NANO-Antivirus	Trojan.Win32.Trojan-Ransom.uysmf
ViRobot	Trojan.Win32.A.DoubleEagle.471040
Tencent	Win32.Trojan.Doubleeagle.Syrj
Comodo	Malware@#339tv4g6svxzj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
Antiy-AVL	Trojan/Generic.ASMalwS.19D3F2
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	PUA:Win32/Presenoker
SUPERAntiSpyware	Ransom.DoubleEagle/Variant
TACHYON	Trojan/W32.Agent.471040.MT
McAfee	Artemis!CB336DB32A01
VBA32	Hoax.DoubleEagle
Panda	Generic Malware
Yandex	Trojan.GenAsa!K9SQB9X2KWc
Fortinet	W32/DoubleEagle.XU!tr

How to remove Hoax.DoubleEagle?

Hoax.DoubleEagle removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X