MSIL/Adware.Dotdo.CP malicious file

The MSIL/Adware.Dotdo.CP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Adware.Dotdo.CP virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/Adware.Dotdo.CP?


File Info:
name: D44E863B78D1F2E51581.mlw
path: /opt/CAPEv2/storage/binaries/d558c383e151131283fbded7761c7b1322784b6e5619575c262884668d3e4750
crc32: B8B7D4F0
md5: d44e863b78d1f2e51581c774df4be52e
sha1: 228d47bf487e1b98e35277436207bb49130e4b96
sha256: d558c383e151131283fbded7761c7b1322784b6e5619575c262884668d3e4750
sha512: 95f70fc8cd0822cb074d7f08d04bf9cb4693697215801f90cb89c698fae0ad21aee141726b6fb6b749c56ccb161e8c42d0a742d99d07d012bab3b5c3e8ac0e4a
ssdeep: 48:6LeC1xLTGGruJEiUTJ4g2tMzxuwV8LJzl32DwD/SfbNtm:FCDLTG06tlyM6zNt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E4916210E7D4433BD9B347B6AEB36B401BF8F7248A575F2D24C5421B9D16A204E73B61
sha3_384: 624232a426bede9d2bd33ee9ba7def33c03bd35af063e3f1a73a2d57ac81fe5e2ac396bae5b6651863e0dbd51c91e9b3
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-09-13 07:24:43

Version Info:
Translation: 0x0000 0x04b0
Comments: calcified
CompanyName: calcified
FileDescription: calcified
FileVersion: 3.7.9.199
InternalName: cats.exe
LegalCopyright: Copyright © calcified 2015
LegalTrademarks: © 2015 calcified
OriginalFilename: cats.exe
ProductName: calcified
ProductVersion: 3.7.9.199
Assembly Version: 3.7.9.199

MSIL/Adware.Dotdo.CP also known as:

Bkav	W32.AIDetectMalware.CS
CrowdStrike	win/grayware_confidence_100% (D)
K7GW	Adware ( 0052b2131 )
K7AntiVirus	Adware ( 0052b2131 )
ESET-NOD32	a variant of MSIL/Adware.Dotdo.CP
APEX	Malicious
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.Agent.gen
NANO-Antivirus	Riskware.Win32.Dotdo.exvhhd
Tencent	Msil.AdWare.Agent.Vimw
F-Secure	Heuristic.HEUR/AGEN.1313678
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	HEUR/AGEN.1313678
Varist	W32/MSIL_Troj.ACC.gen!Eldorado
Xcitium	Application.MSIL.Dotdo.CP@7xj8xg
ZoneAlarm	not-a-virus:HEUR:AdWare.MSIL.Agent.gen
Malwarebytes	Adware.DotDo.Generic
Ikarus	AdWare.MSIL.Dotdo
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Adware/Dotdo
DeepInstinct	MALICIOUS

How to remove MSIL/Adware.Dotdo.CP?

MSIL/Adware.Dotdo.CP removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X