MSIL/Adware.Dotdo.EO (file analysis)

The MSIL/Adware.Dotdo.EO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Adware.Dotdo.EO virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Adware.Dotdo.EO?


File Info:
crc32: C10326C9
md5: cfe1119720a2ae860660959b60b1d688
name: CFE1119720A2AE860660959B60B1D688.mlw
sha1: bcf21669e23dd2dce80148c7c268117aafecb98e
sha256: 3947a5ce23718479cdbba23b3d90a06221021d8c59c8c25e8db69b94243414cb
sha512: 87a8fc5e31164498e835ea2014ffd84e208a85cb7cb1b37a7477410d0b110e28b9f23c891ac73963a3df5a5a8ae1f0646b08f37ad563f76fbe5ad1b9b2bf8895
ssdeep: 6144:idSjUAcm/Mu+l8rulpUgmmFeO6OSmknZY1eV/6czx:/mknZY1P
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 5.9.1.80
InternalName: bridgestone.exe
FileVersion: 5.9.1.80
ProductVersion: 5.9.1.80
FileDescription: limoges
OriginalFilename: bridgestone.exe

MSIL/Adware.Dotdo.EO also known as:

K7AntiVirus	Adware ( 0052cf001 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:MSIL/Dotdo.5b295bf7
K7GW	Adware ( 0052cf001 )
Cybereason	malicious.9e23dd
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.Dotdo.EO
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
NANO-Antivirus	Riskware.Win32.Dotdo.fbahew
Tencent	Msil.Adware.Dotdo.Teiz
Sophos	Generic PUA LM (PUA)
Comodo	ApplicUnwnt@#39an98r05zhzb
BitDefenderTheta	Gen:NN.ZemsilF.34058.Dm0@aiEyhTp
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PH621
McAfee-GW-Edition	BehavesLike.Win32.AdwareTskLnk.gm
FireEye	Generic.mg.cfe1119720a2ae86
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1122406
Microsoft	Trojan:Win32/Wacatac.A!ml
McAfee	PUP-XFD-ON
MAX	malware (ai score=95)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PH621
Ikarus	AdWare.MSIL.Dotdo
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/Dotdo
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.1fc

How to remove MSIL/Adware.Dotdo.EO?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Adware.Dotdo.EO (file analysis)