MSIL/DomaIQ.P potentially unwanted removal instruction

The MSIL/DomaIQ.P potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/DomaIQ.P potentially unwanted virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
Authenticode signature is invalid

How to determine MSIL/DomaIQ.P potentially unwanted?


File Info:
name: 831FE278215FCCA35B25.mlw
path: /opt/CAPEv2/storage/binaries/7a19030ab932a63e1d6facc331ee2add06143fc581e9f6c6585eecab6c94d552
crc32: 3E188A1B
md5: 831fe278215fcca35b2591bd81bfc398
sha1: b1b37650a6ff8208968d95c3f89fcf52fdafaf0d
sha256: 7a19030ab932a63e1d6facc331ee2add06143fc581e9f6c6585eecab6c94d552
sha512: 997314ce7bb525f81545474777344aa0c87dbf8eb5ab3a0b2edb843f936527da063ce64a4c47cba0b2bd56f3e9c80245d659a681977013e85380132109664e9e
ssdeep: 384:JntNJbIhrNSH+nVuDAM7axGIhzFvA45pUVI0dyDMI0G0DCt8:JtzuQH6VwXaNXA4oLd80b
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T180B22B8E579CE527C67DA77994B20902127493176193EB0F6CC8B5F2CCA33A229177C7
sha3_384: ad6630e0a4bd16e855bd5215bd0ac165ce60f400e242e7ddb54ad920f249ce0e792a4fe3c18f2e7449a84188e8e37ba9
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-01-03 13:31:02

Version Info:
Translation: 0x0000 0x04b0
FileDescription: mmbcsheekx
FileVersion: 4.0.6.191
InternalName: setup.exe
LegalCopyright:  
OriginalFilename: setup.exe
ProductVersion: 4.0.6.191
Assembly Version: 4.0.6.191

MSIL/DomaIQ.P potentially unwanted also known as:

Bkav	W32.Common.81DFB54F
Lionic	Trojan.Win32.Disfa.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.65248775
Skyhigh	BehavesLike.Win32.Dropper.mm
McAfee	RDN/Real Protect-LS
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
K7GW	Trojan ( 700000121 )
CrowdStrike	win/malicious_confidence_60% (W)
VirIT	Trojan.Win32.Generic.BCAC
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/DomaIQ.P potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.65248775
NANO-Antivirus	Trojan.Win32.Adw.ddqexe
Avast	Win32:PUP-gen [PUP]
Rising	Trojan.Generic!8.C3 (CLOUD)
Emsisoft	Trojan.GenericKD.65248775 (B)
F-Secure	PotentialRisk.PUA/DomaIQ.bsouena
VIPRE	Trojan.GenericKD.65248775
TrendMicro	TROJ_GEN.R002C0OK223
FireEye	Generic.mg.831fe278215fcca3
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.65248775
Jiangmin	Trojan/Generic.bircw
Webroot	W32.Trojan.MSIL.Disfa
Avira	PUA/DomaIQ.bsouena
Antiy-AVL	Trojan/MSIL.Disfa
Kingsoft	Win32.Trojan.Generic.a
Xcitium	Malware@#25klvhalj3zgj
Arcabit	Trojan.Generic.D3E39E07
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.A!ml
Google	Detected
AhnLab-V3	Trojan/Win32.Blocker.R93565
ALYac	Trojan.GenericKD.65248775
Malwarebytes	Malware.AI.2265706301
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0OK223
Tencent	Malware.Win32.Gencirc.13b9f359
Yandex	Trojan.Disfa!Qd1OjrKWHrw
Ikarus	PUA.DomaIQ
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Injector.JAX!tr
BitDefenderTheta	Gen:NN.ZemsilF.36680.bm0@aGm70Tg
AVG	Win32:PUP-gen [PUP]
Cybereason	malicious.0a6ff8
DeepInstinct	MALICIOUS

How to remove MSIL/DomaIQ.P potentially unwanted?

MSIL/DomaIQ.P potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X