TrojanClicker:Win32/Doplik.J removal instruction

The TrojanClicker:Win32/Doplik.J is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanClicker:Win32/Doplik.J virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine TrojanClicker:Win32/Doplik.J?


File Info:
name: 0877E7825271B775462A.mlw
path: /opt/CAPEv2/storage/binaries/6a613ff934759512a9e04c0a126ea0977a86ce1d096bd2fae8a60a6dcd100504
crc32: CDBCE854
md5: 0877e7825271b775462abd294c605345
sha1: 4a6672f3767454a5049e891ee2db15eee670dc54
sha256: 6a613ff934759512a9e04c0a126ea0977a86ce1d096bd2fae8a60a6dcd100504
sha512: 7b2b042101ce6306bae9ca723d97d5088578a433489a8e7460d8c6abb40e7dde2fd83fe602c3bee9a4260786aac77de0d4ee475ae40b24835b2636709d09cd12
ssdeep: 196608:VYu2ohvcL74PhYLJIUCIK1mWm/C3ue6QQL2Pi6dyTYnfmbnzXAaU+pumJlZ1:VH2ohkAPhYL8IUmsXCyPi2yTYfmbzwap
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A8B633A2E4349561EBF83BF08872A6650B766C7D59E1450A393437DDAA72F03FD1E20C
sha3_384: da792a45e0b5d5b7f564851ed66471d75efefaea261f98f237960472434af17b4b3395c642352508627a81e1b67b2363
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2011-07-06 14:31:20

Version Info:
CompanyName: OpenBook
FileVersion: 17.2101.1.0
Translation: 0x0000 0x04b0

TrojanClicker:Win32/Doplik.J also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Trojan.Generic.31562314
FireEye	Trojan.Generic.31562314
ALYac	Trojan.Generic.31562314
Zillya	Adware.Acsm.Win32.5
CrowdStrike	win/grayware_confidence_100% (D)
K7GW	Adware ( 005933371 )
K7AntiVirus	Adware ( 005933371 )
ESET-NOD32	a variant of Win32/Adware.BookLot.A
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Acsm.gen
BitDefender	Trojan.Generic.31562314
Rising	Trojan.Clicker!8.1972 (CLOUD)
Emsisoft	Trojan.Generic.31562314 (B)
VIPRE	Trojan.Generic.31562314
GData	Trojan.Generic.31562314
MAX	malware (ai score=86)
Antiy-AVL	GrayWare/Win32.VRBrothers
Arcabit	Trojan.Generic.D1E19A4A
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Acsm.gen
Microsoft	TrojanClicker:Win32/Doplik.J
Tencent	Win32.AdWare.Acsm.Bkjl

How to remove TrojanClicker:Win32/Doplik.J?

TrojanClicker:Win32/Doplik.J removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X