Malware

How to remove “Troj/DocDl-ABAV”?

Malware Removal

The Troj/DocDl-ABAV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/DocDl-ABAV virus can do?

  • The office file contains 4 macros
  • The office file contains a macro with auto execution
  • The office file contains a macro with suspicious strings

How to determine Troj/DocDl-ABAV?


File Info:

crc32: 57977EE5
md5: e04b0076111b8001ca4b27ffb7aa61d1
name: upload_file
sha1: 56b998b331049be9e4c23f260013a3849da69612
sha256: 052c625996d17ea0d44107e675e867b14dc99ec76a64899f139a5023b1c1c63e
sha512: e946dcae5da64f495476acc6dc2a5e32d77b9cab31727a6c291b37e995cdbea53055d5167207549d6bd05e4735214a8e1283a153ca9b1f936acb58c8d6c9991a
ssdeep: 1536:1roSxdvVhSHu7kk+AzpPw2u0rKRAYGuoJ4An8YLrrmIuPGIi0u2kzRcBO0rlKUNV:zfh4k9zpPfSQbjLvWPkkHZJyKB3ND
type: Microsoft Word 2007+

Version Info:

0: [No Data]

Troj/DocDl-ABAV also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44252118
FireEyeTrojan.GenericKD.44252118
BitDefenderTrojan.GenericKD.44252118
TrendMicroHEUR_VBA.O2
CyrenPP97M/Downldr.OK!Eldorado
SymantecTrojan.Gen.NPE
CynetMalicious (score: 85)
KasperskyHEUR:Trojan.MSOffice.SAgent.gen
AlibabaTrojanDownloader:VBA/Obfuscation.A
NANO-AntivirusTrojan.Ole2.Vbs-heuristic.druvzi
ViRobotDOC.Z.Agent.49664.AGG
TencentHeur.Macro.Generic.e.6301d628
Ad-AwareTrojan.GenericKD.44252118
SophosTroj/DocDl-ABAV
InvinceaTroj/DocDl-ABAV
EmsisoftTrojan.GenericKD.44252118 (B)
IkarusTrojan-Downloader.VBA.Agent
GDataTrojan.GenericKD.44252118
AviraHEUR/Macro.Downloader.MRDY.Gen
MAXmalware (ai score=99)
ArcabitHEUR.VBA.CG.1
ZoneAlarmHEUR:Trojan.MSOffice.SAgent.gen
ZonerProbably Heur.W97Obfuscated
ESET-NOD32VBA/TrojanDownloader.Agent.UTN
RisingMalware.ObfusVBA@ML.92 (VBA)
SentinelOneDFI – Malicious OPENXML
FortinetVBA/Agent.UTN!tr
AVGOther:Malware-gen [Trj]

How to remove Troj/DocDl-ABAV?

Troj/DocDl-ABAV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment