Should I remove “Win32/HotDownloads potentially unwanted”?

The Win32/HotDownloads potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/HotDownloads potentially unwanted virus can do?

Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Win32/HotDownloads potentially unwanted?


File Info:
crc32: EC53658E
md5: dd6c6f023277ceb31c36c1760e1d0601
name: 1c06bb0126c991a3f5b7d7652bde9788df539f1358b8aabbdf80420ea34b13df.exe
sha1: 626ac94371ab7798007c743f3b62382860dfa5f3
sha256: 1c06bb0126c991a3f5b7d7652bde9788df539f1358b8aabbdf80420ea34b13df
sha512: 8a71ffe9eac249790b23be12600a67e04557e2ac0cd6ee5f0c4db0f21c8e1e170d00ada8abd7445c1252c8f1b448afd93000ce26805d918990e35fb2ced5fa5d
ssdeep: 98304:KfdTK0j+7hB/U1pYrWxplZi42kNjQiAV/bQRpo3kDj+FMdq8SCB57k:wRTMipLgLVcRpdWFMfSCB5o
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2010
InternalName: SoftContainer
FileVersion: 1, 0, 0, 1194
ProductName: SoftContainer Module
ProductVersion: 1, 0, 0, 1194
FileDescription: SoftContainer Module
OriginalFilename: SoftContainer.exe
Translation: 0x0409 0x04b0

Win32/HotDownloads potentially unwanted also known as:

CAT-QuickHeal	Trojan.IGENERIC
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 004bb30e1 )
K7GW	Adware ( 004bb30e1 )
TrendMicro	TROJ_GEN.R030C0OF318
NANO-Antivirus	Trojan.Win32.LMN.etvbdm
Symantec	Trojan.Gen.2
TrendMicro-HouseCall	TROJ_GEN.R030C0OF318
Paloalto	generic.ml
DrWeb	Adware.Downware.9674
Zillya	Backdoor.Xyligan.Win32.4061
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUP.rc
Sophos	Generic PUA GC (PUA)
Jiangmin	Backdoor.Xyligan.ft
Webroot	W32.Malware.Gen
Avira	APPL/SoftContainer.Gen5
MAX	malware (ai score=99)
Endgame	malicious (high confidence)
AegisLab	Trojan.Win32.Generic.4!c
McAfee	Artemis!DD6C6F023277
AVware	Trojan.Win32.Generic!BT
VBA32	Adware.HotDownloads.gen
ESET-NOD32	a variant of Win32/HotDownloads potentially unwanted
Rising	Malware.Undefined!8.C (CLOUD)
Yandex	Riskware.HotDownloads!
Ikarus	PUA.HotDownloads
Fortinet	Riskware/HotDownloads
AVG	FileRepMetagen [Malware]
Cybereason	malicious.371ab7
Avast	FileRepMetagen [Malware]

How to remove Win32/HotDownloads potentially unwanted?

Win32/HotDownloads potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X