VirTool:Win32/Dominicus.A malicious file

The VirTool:Win32/Dominicus.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win32/Dominicus.A virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine VirTool:Win32/Dominicus.A?


File Info:
name: CDB970C79E39572F3AB9.mlw
path: /opt/CAPEv2/storage/binaries/9513d42ee449294c27dc1f6e60d667c47d39677cfa8ed8e719f0b5e78811bb8f
crc32: F8F5E091
md5: cdb970c79e39572f3ab9f30269996e18
sha1: 9e3eaeb5e705372e9d8599cd3f2707d33b374eb3
sha256: 9513d42ee449294c27dc1f6e60d667c47d39677cfa8ed8e719f0b5e78811bb8f
sha512: 493fe103d466b62d044d279560d243ac44b0bd2f24c9dbcadd9845f7e53862f60f1fbb3ad84e25da568a334e4cd185bcbec72ea281f7f22a021df7d5e433eb56
ssdeep: 49152:NGWUYBMBHW4oMKqxHJEpnY+uc0yi4/U4ajX6mt28HN0k0c1ji3n+TPz9D5Ua/FbJ:NGWUiM8aMY+uc9zwBkc1cOmOAM+A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T168566B90FDDB50F9FA07653148A7627F2B30A2099735CEC7C6409EA6FC27AD21933619
sha3_384: f3a5faeb7c4924c552dae50261420ae4caf96d8f3a3237e91a69b9c73f7852c46f8631c3885fbf01486eb9c073aa7d3b
ep_bytes: e91bd8ffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

VirTool:Win32/Dominicus.A also known as:

Lionic	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Trojan.GenericKD.63630306
FireEye	Generic.mg.cdb970c79e39572f
McAfee	GenericRXAA-AA!CDB970C79E39
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.C
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	VirTool:Win32/Dominicus.38617ea3
K7GW	Trojan ( 00581b701 )
K7AntiVirus	Trojan ( 00581b701 )
Cyren	W32/Agent.FGW.gen!Eldorado
ESET-NOD32	a variant of WinGo/HackTool.Agent.O
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.63630306
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Crypt.Fkjl
Ad-Aware	Trojan.GenericKD.63630306
TrendMicro	Trojan.Win32.DEIMOS.SMDC2A
Ikarus	Trojan.Crypt
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=84)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	VirTool:Win32/Dominicus.A
GData	Win32.Trojan.Agent.00NLU7
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R533900
VBA32	Trojan.Klubdepa
Malwarebytes	RiskWare.Deimos.GO
APEX	Malicious
Rising	Trojan.Generic@AI.97 (RDML:g/GRe409rCvDPzOLjk2JzQ)
SentinelOne	Static AI – Suspicious PE
AVG	Win32:Malware-gen
Cybereason	malicious.79e395

How to remove VirTool:Win32/Dominicus.A?

VirTool:Win32/Dominicus.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X