Win32/TaojinStar.P (file analysis)

The Win32/TaojinStar.P is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TaojinStar.P virus can do?

• Attempts to connect to a dead IP:Port (1 unique times)
• Presents an Authenticode digital signature
• A process attempted to delay the analysis task.
• Reads data out of its own binary image
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Attempts to modify proxy settings

Related domains:

How to determine Win32/TaojinStar.P?

File Info:
crc32: C5669AC9
md5: dd98e46fbd3b9857e976f2d9be7bb750
name: doyo3.1.0.3168.2.exe
sha1: 5a40567a9fbb957df024b01388acfe00d95edc92
sha256: b97641e6adf0a85d159eb61d99a47db9ce3d6949cec17585f42efad77703d863
sha512: 3b0375b4f7dd102ebefb700c18da4a8f0e8461b8485be5ce8aebd5e38acb4b24b33259a0112823adafd589f2f6ef55b0c0236b991ac3c6816ca52c0ed7ee8afd
ssdeep: 196608:ffZk2oECiT5G/QXBiOO5fDe/e0l9KHZSXgCE+eNF5I1w:fPzCEO5yvl9K591NFF
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: doyo.cn All Rights Reserved
FileVersion: 1.0.0.42
CompanyName: Doyo.cn
ProductName: x9017x6e38x6e38x620fx76d2
ProductVersion: 3.1.0.3168
FileDescription: x9017x6e38x6e38x620fx76d2 x5b89x88c5x7a0bx5e8f
Translation: 0x0804 0x04b0

Win32/TaojinStar.P also known as:

How to remove Win32/TaojinStar.P?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.