Troj/DocDl-AARR information

The Troj/DocDl-AARR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/DocDl-AARR virus can do?

How to determine Troj/DocDl-AARR?


File Info:
crc32: 38A4D027
md5: 557571e2f5c9d58a43041fbfefd8cdb4
name: upload_file
sha1: e5323152c9048c9b03985aa9b92e2916d096a078
sha256: aa34d8780cc5c891ff334c28bbafdc6561ab8b554fa8a3bc346a6d474c2c414e
sha512: 91caa9ce002c6af33fa4ac3c7b364d11507029efcfc97916ea3863aa60370b97e384a33cd02103f98b6bb07f94b3d1c274650759832a12cdb45e7e1a08948381
ssdeep: 1536:RJVnK90GM9xuXFEr4Zx50zkGcclJvah3qb6zCfNmypmOLpv5E2BkQU5mRlX8t:RfCMbu1Ty+cray6mfNmwLpBjBUM7X8t
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Non., Author: Alice Menard, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Thu Sep 24 14:49:00 2020, Last Saved Time/Date: Thu Sep 24 14:49:00 2020, Number of Pages: 1, Number of Words: 3377, Number of Characters: 19251, Security: 8

Version Info:
0: [No Data]

Troj/DocDl-AARR also known as:

Elastic	malicious (high confidence)
CAT-QuickHeal	W97M.Emotet.Heur
McAfee	W97M/Downloader.dbv
K7AntiVirus	Trojan ( 0056edf51 )
K7GW	Trojan ( 0056edf51 )
TrendMicro	Trojan.W97M.EMOTET.TIOIBELH
Cyren	W97M/Downldr.IE.gen!Eldorado
Symantec	ISB.Downloader!gen411
TrendMicro-HouseCall	Trojan.W97M.EMOTET.TIOIBELH
ClamAV	Doc.Downloader.Emotet-9765780-0
Kaspersky	HEUR:Trojan.MSOffice.SAgent.gen
Rising	Malware.ObfusVBA@ML.82 (VBA)
F-Secure	Malware.W97M/Agent.1869613
DrWeb	Exploit.Siggen2.43382
Invincea	Troj/DocDl-AARR
McAfee-GW-Edition	W97M/Downloader.dbv
Sophos	Troj/DocDl-AARR
SentinelOne	DFI – Malicious OLE
Avira	VBA/Dldr.Agent.zxsgg
Microsoft	TrojanDownloader:O97M/Emotet.CSK!MTB
ZoneAlarm	HEUR:Trojan.MSOffice.SAgent.gen
GData	Generic.Trojan.Agent.7GRQ12
AhnLab-V3	Downloader/DOC.Emotet.S1294
ESET-NOD32	VBA/TrojanDownloader.Agent.ULL
Tencent	Heur.Macro.Generic.h.b28e2672
Ikarus	Trojan-Downloader.VBA.Agent
Fortinet	VBA/Agent.UFY!tr
Qihoo-360	virus.office.qexvmc.1095

How to remove Troj/DocDl-AARR?

Troj/DocDl-AARR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X