PUP.Optional.DomaIQ.DDS removal

The PUP.Optional.DomaIQ.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.DomaIQ.DDS virus can do?

Unconventionial language used in binary resources: Spanish (Modern)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUP.Optional.DomaIQ.DDS?


File Info:
name: E87499ED95E2F6EAA0A2.mlw
path: /opt/CAPEv2/storage/binaries/440aa4e8e3f9386fce78b9cde7fdc7807cabc3d274c5ff9bc43d4a587ad791c7
crc32: 69740FEB
md5: e87499ed95e2f6eaa0a247eb908e2c97
sha1: 2a09e57f3deed07d0576e61a66638825aaab2583
sha256: 440aa4e8e3f9386fce78b9cde7fdc7807cabc3d274c5ff9bc43d4a587ad791c7
sha512: 84df8fe033a777a7b8d7825728360b01a7849128bf73947c88278a7f7c39b93c582abe90a00f264c2603829b9f9e368001081b7b45d113a4ca31f89239b48b30
ssdeep: 3072:xIWgjuNYk3Tepf3fzlpRezcqn+pME8Giqgnj5otkz8QM9fhLS0+dGrvw+j1Lzs3w:rN73TeVbleZnFikzoSf2Qq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113549D1034D88131E17A47B245E4A13107BEBC724B6AEEEF6FC91AD92AB13D18735763
sha3_384: 54e9ceec3933242cedf1d6c9c3aa7c4dd31322b45a4a5b4d0179940ff0a3d1c34bbcfd2734c298f7624c939922f6d1b7
ep_bytes: e82f340000e939feffff558bec837d08
timestamp: 2014-05-23 08:19:48

Version Info:
0: [No Data]

PUP.Optional.DomaIQ.DDS also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.94149
FireEye	Generic.mg.e87499ed95e2f6ea
McAfee	PUP-XTL-UI
Malwarebytes	PUP.Optional.DomaIQ.DDS
Zillya	Adware.DomaIQ.Win32.300
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Adware ( 005981201 )
K7GW	Adware ( 005981201 )
CrowdStrike	win/grayware_confidence_90% (D)
Baidu	Win32.Adware.DomaIQ.a
VirIT	Trojan.Win32.Packed.BNPS
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/DomaIQ_AGen.A potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKDZ.94149
SUPERAntiSpyware	PUP.DomaIQ/Variant
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Crypt.XPACK.Gen2
DrWeb	Trojan.Packed.26819
VIPRE	Trojan.GenericKDZ.94149
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.GenericKDZ.94149 (B)
Ikarus	AdWare.DomaIQ
GData	Trojan.GenericKDZ.94149
Jiangmin	AdWare/MSIL.rs
Avira	TR/Crypt.XPACK.Gen2
Antiy-AVL	GrayWare[AdWare]/Win32.Lollipop
Arcabit	Trojan.Generic.D16FC5
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Adware/Win32.DomaIQ.R250601
BitDefenderTheta	Gen:NN.ZexaF.36250.rmW@aqOaTYSi
ALYac	Trojan.GenericKDZ.94149
MAX	malware (ai score=86)
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:w+7YGoReol0zyUk1UzeGZQ)
Yandex	Trojan.Packed!b07UQsJLXe0
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Generic.AC.22288C!tr
DeepInstinct	MALICIOUS

How to remove PUP.Optional.DomaIQ.DDS?

PUP.Optional.DomaIQ.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X