Malware

Should I remove “Win32/Sogou.H potentially unwanted”?

Malware Removal

The Win32/Sogou.H potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Sogou.H potentially unwanted virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Sogou.H potentially unwanted?


File Info:

crc32: 6EA1BFFD
md5: 0820204c545bc8feb74fbe21480c42d7
name: sogoudddhb.e
sha1: 7d5f5d65c25c860c3127df37d44fedef0da1ee7d
sha256: 893902edd6cf1bcfde58a832ae181630287d5633f159cebaea36ea0bd86fb5ee
sha512: e3254981a538e3a1921946b682bae86c7d03ec03b2aa4bef8ffad0ea71601dacc9a0cc151b4c62ff1b694e53a0be6c29eaa09e03f5ba970ac1a5404e463205e8
ssdeep: 49152:iuuE7AkqIxGrGYyZa/tgrYJUGfZC3wA6EylfwEaFW:kE7AfrlyutLxC3sEwwM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 2014 Sogou.com Inc. All rights reserved.
InternalName: MiniDownLoad.exe
FileVersion: 3.1.12.94
CompanyName: Sogou.com Inc.
ProductName: x8f6fx4ef6x52a9x624b
ProductVersion: 3.1.12.94
FileDescription: x8f6fx4ef6x52a9x624b
OriginalFilename: MiniDownLoad.exe
Translation: 0x0804 0x04b0

Win32/Sogou.H potentially unwanted also known as:

DrWebBackDoor.Gbot.2850
FireEyeGeneric.mg.0820204c545bc8fe
CAT-QuickHealTrojan.MauvaiseRI.S5244821
CylanceUnsafe
VIPRETrojan.Win32.Generic.pak!cobra
K7AntiVirusUnwanted-Program ( 004cca081 )
K7GWUnwanted-Program ( 004cca081 )
TrendMicroTROJ_GEN.R002C0PB920
CyrenW32/Sogou.H.gen!Eldorado
TrendMicro-HouseCallTROJ_GEN.R002C0PB920
AvastWin32:Malware-gen
ClamAVWin.Worm.Chir-2282
GDataWin32.Trojan.Agent.8FHK3V
Kasperskynot-a-virus:Downloader.Win32.Sogou.g
AlibabaDownloader:Win32/Sogou.1b36fa80
NANO-AntivirusTrojan.Win32.Gbot.fgypno
SophosGeneric PUA HN (PUA)
ComodoApplication.Win32.Sogou.C@6e9656
F-SecureAdware.ADWARE/Sogou.ijytg
ZillyaDownloader.SogouCRTD.Win32.237
Invinceaheuristic
McAfee-GW-EditionPUP-FTL
EmsisoftApplication.Chindo (A)
Ikarusnot-a-virus:Downloader.Sogou
F-ProtW32/Sogou.H.gen!Eldorado
eGambitUnsafe.AI_Score_99%
AviraADWARE/Sogou.ijytg
Endgamemalicious (high confidence)
ZoneAlarmnot-a-virus:Downloader.Win32.Sogou.g
MicrosoftPUA:Win32/Sogou
McAfeePUP-FTL
VBA32Downloader.Sogou
MalwarebytesAdware.Sogou
PandaPUP/Sogou
APEXMalicious
ESET-NOD32a variant of Win32/Sogou.H potentially unwanted
TencentMalware.Win32.Gencirc.10b135f4
YandexPUA.Downloader!
SentinelOneDFI – Malicious PE
FortinetRiskware/Sogou
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_80% (D)

How to remove Win32/Sogou.H potentially unwanted?

Win32/Sogou.H potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment