Should I remove “TrojanDropper:Win32/Dogkild.A”?

The TrojanDropper:Win32/Dogkild.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Dogkild.A virus can do?

• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Creates an autorun.inf file
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Detects Bochs through the presence of a registry key
• The sample wrote data to the system hosts file.
• Anomalous binary characteristics
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine TrojanDropper:Win32/Dogkild.A?

File Info:
name: 32FE4445236EA52DEFCB.mlw
path: /opt/CAPEv2/storage/binaries/9a053d28731159d3b4f07a6e3b64447dea49a2a63ef2047de61f8908fb96c156
crc32: 9DBF0550
md5: 32fe4445236ea52defcba55912becc9d
sha1: ab1560092181713c62522956a413cefe06777f99
sha256: 9a053d28731159d3b4f07a6e3b64447dea49a2a63ef2047de61f8908fb96c156
sha512: 1b45bef862e149dd792fd8d7e3f5d6dcac598be775c80883b7522587eb26053a6ee2616d75194ffbdc18fc760fffaeef4851d86801210db04eecdeeabb7ccb24
ssdeep: 768:y2V0pdhp/2xnQomScsIDk4JD4mEqdIj4b/WqW2Sny5ZY:3E8xnQom9Qm7KjL2Gy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BDE2E109B5AF185BC0494A7C0CF71C94BDD939CA4A578D63B06A4C4C2C4697FF79A632
sha3_384: af64a0323fc3b9218c568bb08a6df3fad3e5aad0a496483685fcfbde3ef246046028796f38b31e595f009d287d53249c
ep_bytes: 9c60fce80000000055b8070000002be8
timestamp: 2009-11-25 13:08:01

Version Info:
0: [No Data]

TrojanDropper:Win32/Dogkild.A also known as:

How to remove TrojanDropper:Win32/Dogkild.A?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.