Win32/Toolbar.Sogou potentially unwanted removal instruction

The Win32/Toolbar.Sogou potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Toolbar.Sogou potentially unwanted virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Win32/Toolbar.Sogou potentially unwanted?


File Info:
name: C8CEFD2C39856990F976.mlw
path: /opt/CAPEv2/storage/binaries/834ce0144b0d7072f123ddf91bbb01a7a5aaf67d9a56add33c7285e89e2ad0a2
crc32: 87309694
md5: c8cefd2c39856990f976f28442cc1e38
sha1: 42718d767769e5b8a2f55aa89e25a18cd9b433f0
sha256: 834ce0144b0d7072f123ddf91bbb01a7a5aaf67d9a56add33c7285e89e2ad0a2
sha512: 4ae6e362eb5c880d0a6319ec6af78ccb934464df87f51ae2129a697b3c51b557618d58ca78a2bcfe0f95b8b7051a686f8674932d7ce13dfdde88f021792904d7
ssdeep: 3072:T9b87YTOqrXS6nzNEzjJeK9QxEqhdlm3ynjAr:R4MThnzgUK94The9
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A1B38E1273D5C0B1D1CA013D4944AB65A3BBEE30FDB94947AB28368DAF757C39A39306
sha3_384: 22afd813ca06988db0d8dd6eb539498e08833351365a53f567977824297082601ce1e061b395ffe3106d5e620f3e603f
ep_bytes: 6a0c68704d0110e862e7ffff33c04089
timestamp: 2006-07-31 11:24:13

Version Info:
CompanyName: Sohu.com Inc.
FileDescription: Encyclopedia
FileVersion: 1, 0, 2, 3
InternalName: Encyclopedia.dll
LegalCopyright: (C) Sohu.com Inc. All rights reserved.
OriginalFilename: Encyclopedia.dll
ProductName: Sogou Express
ProductVersion: 1, 0, 1, 3
Translation: 0x0804 0x03a8

Win32/Toolbar.Sogou potentially unwanted also known as:

Lionic	Trojan.Win32.Sogou.4!c
Skyhigh	Generic PUP.mn
McAfee	Generic PUP.mn
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Viq2
ESET-NOD32	Win32/Toolbar.Sogou potentially unwanted
Cynet	Malicious (score: 100)
TACHYON	Trojan-Clicker/W32.Sohu.114688
Webroot	Adware.Sogou
Varist	W32/Sohu.HGLP-2428
Antiy-AVL	Trojan/Win32.TSGeneric
Kingsoft	malware.kb.a.825
Xcitium	Malware@#3ax2uapnjan7s
Google	Detected
ALYac	Adware.Toolbar.SoGou
VBA32	Trojan.BHORA.02515
Rising	Trojan.Win32.Generic.126121FD (C64:YzY0Oo2UnEM2w4i/)
Yandex	Trojan.GenAsa!sKMPl9k0wBk
Fortinet	Riskware/Sogou
DeepInstinct	MALICIOUS

How to remove Win32/Toolbar.Sogou potentially unwanted?

Win32/Toolbar.Sogou potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X