Categories: Crack

Win32/DongleHack.MultiKey.A potentially unsafe removal instruction

The Win32/DongleHack.MultiKey.A potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/DongleHack.MultiKey.A potentially unsafe virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality
  • Created a process from a suspicious location
  • Accessed credential storage registry keys

How to determine Win32/DongleHack.MultiKey.A potentially unsafe?


File Info:

name: 7200DFC0193C0972B51D.mlwpath: /opt/CAPEv2/storage/binaries/2a0bc74243836fc3d0dc130d1a8288cd365c3754d946c4f6465eb05fccdf7fe6crc32: 2E0DDCC3md5: 7200dfc0193c0972b51db2e0200ce835sha1: c540395a0ca22dcc63a50024474982628ae40996sha256: 2a0bc74243836fc3d0dc130d1a8288cd365c3754d946c4f6465eb05fccdf7fe6sha512: 0b301ae2c9d18c6c8b5971349a23087dd5b3cdf3ab0ba813096a4ee624b6ea5ef480c03a90e4fd1107db81ea73ee4ae86ce7a51ac7a694cb746828841c398d47ssdeep: 6144:14lRkAehaKuqT+FJcbp96w8z7UBp2lRGke61F:1kWAehJuqTCcbp96w8z4qo5OFtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CB34BE73E8CBC4FCEEB5203149B24506C27EFB302DE1891AD35C5EA673B11A65A29713sha3_384: e5c5316b48e20c7788b44f75c23bd3256301e7e7ef0af2ac66b2c4c45ebecb612666ff5aba8c64c2601489f2fb17f9ffep_bytes: e8e3feffff33c050505050e8d52d0000timestamp: 2011-05-28 16:04:29

Version Info:

0: [No Data]

Win32/DongleHack.MultiKey.A potentially unsafe also known as:

Lionic Trojan.Multi.Generic.4!c
DrWeb Trojan.MulDrop6.36100
MicroWorld-eScan Adware.GenericKD.5807579
McAfee RDN/Generic PUP.x
Cylance Unsafe
Sangfor Riskware.Win32.Agent.ky
K7AntiVirus Unwanted-Program ( 004c3ebb1 )
K7GW Unwanted-Program ( 004c3ebb1 )
Cybereason malicious.0193c0
Symantec Trojan.Gen
ESET-NOD32 a variant of Win32/DongleHack.MultiKey.A potentially unsafe
TrendMicro-HouseCall TROJ_GEN.R002C0OJ921
Paloalto generic.ml
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Adware.GenericKD.5807579
NANO-Antivirus Trojan.Win32.Drop.ebjlde
Avast Win32:Malware-gen
Ad-Aware Adware.GenericKD.5807579
Emsisoft Adware.GenericKD.5807579 (B)
Comodo Malware@#1i3pjjpvwrs3o
TrendMicro TROJ_GEN.R002C0OJ921
McAfee-GW-Edition BehavesLike.Win32.Dropper.dc
FireEye Adware.GenericKD.5807579
Sophos Generic PUA MF (PUA)
Ikarus PUA.DongleHack.Multikey
GData Adware.GenericKD.5807579
Webroot W32.Trojan.GenKD
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Microsoft Backdoor:Linux/Gafgyt.B!MTB
AhnLab-V3 Malware/Win32.Generic.C2099111
VBA32 Trojan.Occamy
ALYac Adware.GenericKD.5807579
Malwarebytes Malware.AI.4214164964
APEX Malicious
Yandex Riskware.MultiKey!lB95dkDXWtI
MAX malware (ai score=100)
Fortinet Riskware/DongleHack_MultiKey
AVG Win32:Malware-gen
Panda Trj/CI.A

How to remove Win32/DongleHack.MultiKey.A potentially unsafe?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Win32/Agent.AFBR information

The Win32/Agent.AFBR is considered dangerous by lots of security experts. When this infection is active,…

1 min ago

Barys.385087 removal guide

The Barys.385087 is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

PWS:Win32/Chyup.B malicious file

The PWS:Win32/Chyup.B is considered dangerous by lots of security experts. When this infection is active,…

12 mins ago

Trojan.Win32.Agent.xboakk removal

The Trojan.Win32.Agent.xboakk is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

About “Worm.Win32.Vobfus.efoh” infection

The Worm.Win32.Vobfus.efoh is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Generic.Malware.Lco.500CC679 removal tips

The Generic.Malware.Lco.500CC679 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago