Trojan.Downloader.Dofoil

By CagedTech in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	360

First Seen:	January 2, 2012
Last Seen:	February 7, 2022
OS(es) Affected:	Windows

Dofoil is a configurable Trojan downloader related to rogue security programs such as System Fix, Fake HDD, HDD Repair, System Recovery, etc. Dofoil downloads random files that will be executed to perform threatening actions. The main distribution method used by Dofoil is adding itself to spam e-mail attachments or links that when accessed, open a port to Dofoil's installation. However, Dofoil may be purchased through the Black Market or installed using vulnerabilities on the targeted computer. Dofoil may receive instructions from remote servers and use a rootkit to prevent its detection and removal. Trojans that are helped by rootkits are hard to be noticed until is almost too late since remaining unattended on the infected computer they may literally destroy the machine. Therefore, if any abnormal behavior presented by your computer may point to Dofoil's presence, you should use a potent malware scanner to detect and remove Dofoil from your machine.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Panda	Trj/Zbot.M
AVG	Downloader.Generic12.BBJP
Ikarus	Trojan-Downloader.Win32.Injecter
AntiVir	TR/Kazy.56214.1
BitDefender	Gen:Variant.Kazy.56214
Kaspersky	Trojan-Downloader.Win32.Injecter.itl
Avast	Win32:Agent-AOCY [Trj]
NOD32	a variant of Win32/Kryptik.AAXR
K7AntiVirus	Trojan-Downloader
McAfee	Generic BackDoor.xd
AVG	SHeur4.MCL
Ikarus	Trojan-Ransom.Win32.PornoCodec
Sophos	Troj/Bredo-OL
BitDefender	Gen:Variant.Kazy.51075
Kaspersky	Trojan.Win32.Jorik.MokesLoader.ik

SpyHunter Detects & Remove Trojan.Downloader.Dofoil

File System Details

Trojan.Downloader.Dofoil may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	dxdiag.exe	30398f70808f9582a9299c28ffbc3446	7
Name: dxdiag.exe MD5: 30398f70808f9582a9299c28ffbc3446 Size: 197.12 KB (197120 bytes) Detections: 7 Type: Executable File Path: %USERPROFILE%\Start Menu\Programs\Startup Group: Malware file Last Updated: January 10, 2012
2.	csrss.exe	f0065812dcb61f9e351bb973d1ce18ac	6
Name: csrss.exe MD5: f0065812dcb61f9e351bb973d1ce18ac Size: 45.56 KB (45568 bytes) Detections: 6 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: January 10, 2012
3.	csrss.exe	7ebb0228172a266078f00dde0f2faf1e	6
Name: csrss.exe MD5: 7ebb0228172a266078f00dde0f2faf1e Size: 48.12 KB (48128 bytes) Detections: 6 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: February 6, 2012
4.	csrss.exe	c6f79e1796fe6b52d80a682346049aa2	3
Name: csrss.exe MD5: c6f79e1796fe6b52d80a682346049aa2 Size: 53.24 KB (53248 bytes) Detections: 3 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: January 2, 2012
5.	csrss.exe	043c60e3cbc76eb47d6e3fedf001a697	3
Name: csrss.exe MD5: 043c60e3cbc76eb47d6e3fedf001a697 Size: 49.15 KB (49152 bytes) Detections: 3 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: January 2, 2012
6.	5016.sys	29cc35544b0556a1d7cec1d2c25f7002	3
Name: 5016.sys MD5: 29cc35544b0556a1d7cec1d2c25f7002 Size: 140.28 KB (140288 bytes) Detections: 3 Type: System file Path: %TEMP% Group: Malware file Last Updated: January 10, 2012
7.	6A18.exe	d0bb8db6cc593978a74d494fa8135086	2
Name: 6A18.exe MD5: d0bb8db6cc593978a74d494fa8135086 Size: 380.92 KB (380928 bytes) Detections: 2 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: January 10, 2012
8.	dxdiag.exe	e58981230326bdc66f9b64dafc9d61e5	2
Name: dxdiag.exe MD5: e58981230326bdc66f9b64dafc9d61e5 Size: 50.68 KB (50688 bytes) Detections: 2 Type: Executable File Path: %USERPROFILE%\Start Menu\Programs\Startup Group: Malware file Last Updated: March 8, 2012
9.	rnkho.exe	d10f581c83e0d3a5d47dfc18a79a524c	1
Name: rnkho.exe MD5: d10f581c83e0d3a5d47dfc18a79a524c Size: 438.27 KB (438272 bytes) Detections: 1 Type: Executable File Path: %COMMONPROGRAMFILES(x86)% Group: Malware file Last Updated: January 10, 2012
10.	winmgr.exe	fc09df5ce69d5c250f36740f87326680	1
Name: winmgr.exe MD5: fc09df5ce69d5c250f36740f87326680 Size: 372.73 KB (372736 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\M-1-25-5432-6437-5685 Group: Malware file Last Updated: January 10, 2012
11.	csrss.exe	84d0cd7030ff736d7e6aeecc4958ecbd	1
Name: csrss.exe MD5: 84d0cd7030ff736d7e6aeecc4958ecbd Size: 45.05 KB (45056 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: January 10, 2012
12.	csrss.exe	cc02f02dcc5dae3a36f7daac483afd44	1
Name: csrss.exe MD5: cc02f02dcc5dae3a36f7daac483afd44 Size: 49.15 KB (49152 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: January 10, 2012
13.	qhiuy.dll	b370f9053149512ab356fb8b9f7cd1c1	1
Name: qhiuy.dll MD5: b370f9053149512ab356fb8b9f7cd1c1 Size: 49.66 KB (49664 bytes) Detections: 1 Type: Dynamic link library Path: %APPDATA%\Remote Group: Malware file Last Updated: January 10, 2012
14.	gcwcfwfa.exe	7a909452e94ef6a3c9f457cff5feec54	1
Name: gcwcfwfa.exe MD5: 7a909452e94ef6a3c9f457cff5feec54 Size: 233.47 KB (233472 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\Microsoft\vsfcibsa Group: Malware file Last Updated: September 6, 2017
15.	file.exe	3000152d45090b0bd35d18c8c4ac13d2	0
Name: file.exe MD5: 3000152d45090b0bd35d18c8c4ac13d2 Size: 14.84 KB (14848 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: November 23, 2016
16.	file.exe	fe0858c88a175f2396bd5f7591142f84	0
Name: file.exe MD5: fe0858c88a175f2396bd5f7591142f84 Size: 115.71 KB (115712 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: September 6, 2017

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Downloader.Dofoil

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan.Downloader.Dofoil

File System Details

Submit Comment

Related Posts

Trojan.Downloader.Dofoil.R

Trojan.Downloader.Dofoil.G

Trojan.Downloader.Dofoil.O

Trojan.Downloader.Dofoil.D

Trojan.Downloader.Dofoil.L

Trojan.Downloader.Dofoil.U

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen