What is "Trojan.Win32.Snojan.cofp"?

The Trojan.Win32.Snojan.cofp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Snojan.cofp virus can do?

Presents an Authenticode digital signature
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity contains more than one unique useragent.
Anomalous binary characteristics

Related domains:

yz.app.sogou.com

ping.t.sogou.com

How to determine Trojan.Win32.Snojan.cofp?


File Info:
crc32: 8950CD50
md5: e644e84d6056dd8c91535b05658f4843
name: sogoueag.e
sha1: 610ac8b9fe4fb051105dddd26fa1a8a8a328566c
sha256: 5ffd02884493bc24c91bfe571edf9d7f0f48863b31ded908570c554958abe9e3
sha512: 2ace8f66da5ca8e00ce368089954c8a34b53a027a29beb6aabbdff1426802936b79af7c28495596155e53446c03120f2533ff636f547cecbdfeba6f16a2a2031
ssdeep: 12288:AUHzKufgk0IpzpXxsPsM+80/9OCOaVLR7g1xGkgBaFSkYu8DU0OYhLu0O49gY4B:jHVfSIpzpBsGACO0LRs1kk6i6uKVOu4B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2014 Sogou.com Inc. All rights reserved.
InternalName: MiniDownLoad.exe
FileVersion: 2.0.8.1
CompanyName: Sogou.com Inc.
ProductName: x641cx72d7x9ad8x901fx4e0bx8f7dx52a9x624b
ProductVersion: 2.0.8.1
FileDescription: x641cx72d7x9ad8x901fx4e0bx8f7dx52a9x624bx5b89x88c5x5305
OriginalFilename: MiniDownLoad.exe
Translation: 0x0804 0x04b0

Trojan.Win32.Snojan.cofp also known as:

Bkav	W32.HfsAdware.170E
FireEye	Generic.mg.e644e84d6056dd8c
McAfee	Downloader
Malwarebytes	Adware.Downloader.CN
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Riskware.Win32.SogouLoad.1!c
K7AntiVirus	Unwanted-Program ( 004cca081 )
K7GW	Unwanted-Program ( 004cca081 )
Cybereason	malicious.9fe4fb
F-Prot	W32/Sogou.H.gen!Eldorado
APEX	Malicious
Avast	Win32:PUP-gen [PUP]
ClamAV	Win.Downloader.Sogou-8
Kaspersky	Trojan.Win32.Snojan.cofp
Alibaba	AdWare:Win32/Sogou.3883e890
NANO-Antivirus	Trojan.Win32.Sogou.engykk
Endgame	malicious (high confidence)
F-Secure	Heuristic.HEUR/AGEN.1121139
DrWeb	BackDoor.Gbot.2817
Zillya	Downloader.SogouCRTD.Win32.237
Invincea	heuristic
Emsisoft	Application.Chindo (A)
Cyren	W32/Sogou.H.gen!Eldorado
Avira	HEUR/AGEN.1121139
Antiy-AVL	RiskWare[Downloader]/Win32.Sogou
SUPERAntiSpyware	Adware.Sogou/Variant
ZoneAlarm	Trojan.Win32.Snojan.cofp
Microsoft	PUA:Win32/Sogou
AhnLab-V3	PUP/Win32.Sogou.C1514212
VBA32	Downloader.Sogou
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Downloader.Sogou.AA potentially unwanted
Yandex	PUA.Downloader!
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.8823740.susgen
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Win32.Snojan.cofp?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan.Win32.Snojan.cofp”?