TrojanDownloader:Win32/Dofoil.AD (file analysis)

The TrojanDownloader:Win32/Dofoil.AD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What TrojanDownloader:Win32/Dofoil.AD virus can do?

• Unconventionial language used in binary resources: Nepali
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Dofoil.AD?

File Info:
crc32: 6450120Bmd5: 86b4f42bf49d46d33bce7771990c8611name: index.exesha1: bdb3d648e7dc23bfbc9abf7cdf95ed10b679b1fbsha256: 03a36d9fc147a517b5ff3ad1f01e4bfcd61390988e671886256b2b56a8d415ecsha512: be36065e71068f62bb4795a8ccba97b4f4595281794da331825d617fb0e31ffedcce90cd0f743eb63ca41066fae75fca8f52644a41e6f2985c35d008b21e9635ssdeep: 3072:JTNMnDLgvmXG6wnzJcou3aBt6bwlomVUpzRSFgI:LMwvPu3k4XSFgItype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

TrojanDownloader:Win32/Dofoil.AD also known as:

MicroWorld-eScan	Trojan.GenericKD.42025687
CAT-QuickHeal	Ransom.Stop.MP4
McAfee	RDN/Generic Downloader.x
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Tofsee.m!c
K7AntiVirus	Trojan ( 0055b9c71 )
BitDefender	Trojan.GenericKD.42025687
K7GW	Trojan ( 0055b9c71 )
Invincea	heuristic
F-Prot	W32/Kryptik.AQX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
GData	Trojan.GenericKD.42025687
Kaspersky	Backdoor.Win32.Tofsee.calv
Rising	Downloader.Dofoil!8.322 (TFE:6:qFwI1sROWJO)
Endgame	malicious (high confidence)
Comodo	Malware@#24t9ob4nys7it
DrWeb	Trojan.DownLoader30.42259
McAfee-GW-Edition	BehavesLike.Win32.IstartSurf.cm
FireEye	Generic.mg.86b4f42bf49d46d3
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Krypt
Cyren	W32/Kryptik.AQX.gen!Eldorado
Jiangmin	Backdoor.Agent.gnb
Webroot	W32.Adware.Installcore
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Backdoor]/Win32.Tofsee
Arcabit	Trojan.Generic.D28142D7
ZoneAlarm	Backdoor.Win32.Tofsee.calv
Microsoft	TrojanDownloader:Win32/Dofoil.AD
AhnLab-V3	Trojan/Win32.MalPe.R299695
Acronis	suspicious
VBA32	BScope.Trojan.Wacatac
ALYac	Trojan.GenericKD.42025687
Ad-Aware	Trojan.GenericKD.42025687
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.GYLY
TrendMicro-HouseCall	TROJ_FRS.VSNW12K19
Fortinet	W32/GenKryptik.DXWH!tr
BitDefenderTheta	Gen:NN.ZexaF.32253.mKW@ae7!7flG
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	HEUR/QVM10.2.4761.Malware.Gen

How to remove TrojanDownloader:Win32/Dofoil.AD?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.