Home » Virus List
Backdoor.Agent
Risk Level 1
 
File Size : 3376918 KB
File Type : Portable Executable file Win32 EXE
File Name

doc.exe

MD5

788e65a029bb2eb67eb7adff35b49454

SHA1

e99c08d56ed24814c92e948197472cf7f328e9a8

SHA256

1172ba6a4e7acbb072bc3e959fb7d8f610ff98f0cb6cb52d2b

General information:

* File name: C:\Users\vmware\Desktop\report\doc.exe

Changes to registry :

no change

Changes to filesystem:

* Changes file attributes C:\Users\vmware\Desktop\report\doc.exe

Network services:

* Queries DNS "webres4.qheal.ctmail.com".
* Queries DNS "www.google.co.in".
* Queries DNS "apis.google.com".
* Queries DNS "csi.gstatic.com".
* Queries DNS "ssl.gstatic.com".
* Queries DNS "resolver5.qheal.ctmail.com".
* Queries DNS "clients1.google.com".
* Queries DNS "www.bing.com".
* Queries DNS "cdn.at.atwola.com".
* Queries DNS "teredo.ipv6.microsoft.com".
* Queries DNS "webres1.qheal.ctmail.com".
* Queries DNS "resolver2.qheal.ctmail.com".
* Queries DNS "resolver3.qheal.ctmail.com".
* Queries DNS "www.msftncsi.com".
* Queries DNS "webres2.qheal.ctmail.com".
* Queries DNS "webres3.qheal.ctmail.com".
* Queries DNS "resolver1.qheal.ctmail.com".

Process/window/string information:

* Contains string Traces of AutoStart registry key ("Software\Microsoft\Windows\CurrentVersion\Run")
* Contains string Checked for F-Secure security software presence ("FSAA")

Additional Information:

How To Remove doc.exe

1.Download Sniper Antivirus
2.Install the exe file on your system.
3.Full Scan your Computer OR Folder where doc.exe located.
4.Once the scan is finished, you’ll get the message “scan is complete”.
Click OK button to get the results.
5.Then Delete the threat from table.

Top