PUA

PUP.Optional.DotDo (file analysis)

Malware Removal

The PUP.Optional.DotDo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.DotDo virus can do?

  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine PUP.Optional.DotDo?


File Info:

crc32: B18A23EF
md5: ebfc853b4ea84d8885b24ea1ffed04d6
name: EBFC853B4EA84D8885B24EA1FFED04D6.mlw
sha1: e710d070918b272f1d55feaa1a1691473748e4ab
sha256: aedcf0112984c9d86c912341038f529fa9c443de4df3b373bac834a6f10c587d
sha512: 62e74e9d58924c964b59e97eef56e10ede339377a36604180ecb99c03542010903838b377079058fa995d4bae752c63cb78f8a9cfa0a5d4afa3048f575a1e005
ssdeep: 6144:de34WfQXefCWgHga5Gp9GMvAss2407+J+XYbSdKaw+Zm1Ms0a:+9GM4ss240GbSdPmC0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

PUP.Optional.DotDo also known as:

Elasticmalicious (high confidence)
DrWebTrojan.MulDrop7.40513
CynetMalicious (score: 99)
CAT-QuickHealRansom.NSIS.Cerber.A
ALYacGen:Variant.Ursu.889786
SangforTrojan.Win32.Tiggre.rfn
CrowdStrikewin/malicious_confidence_80% (D)
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
ESET-NOD32a variant of Win32/Adware.Dotdo.X
APEXMalicious
AvastFileRepMetagen [Adw]
KasperskyHEUR:Trojan.NSIS.Agent.gen
BitDefenderGen:Variant.Ursu.889786
NANO-AntivirusTrojan.Nsis.Adware.fexgye
SUPERAntiSpywarePUP.DotDo/Variant
MicroWorld-eScanGen:Variant.Ursu.889786
Ad-AwareGen:Variant.Ursu.889786
SophosGeneric ML PUA (PUA)
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CERBER.F116JV
FireEyeGen:Variant.Ursu.889786
EmsisoftGen:Variant.Ursu.889786 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1112119
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/Cerber!rfn
ArcabitTrojan.Ursu.DD93BA
AegisLabTrojan.Win32.Generic.4!c
GDataGen:Variant.Ursu.889786
AhnLab-V3Malware/Gen.Generic.C1458802
McAfeeArtemis!EBFC853B4EA8
MAXmalware (ai score=100)
VBA32Trojan.MulDrop
MalwarebytesPUP.Optional.DotDo
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CERBER.F116JV
FortinetW32/Dotdo.X!tr
AVGFileRepMetagen [Adw]
Paloaltogeneric.ml

How to remove PUP.Optional.DotDo?

PUP.Optional.DotDo removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment