Malware

Should I remove “Application.Doina.1”?

Malware Removal

The Application.Doina.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Doina.1 virus can do?

  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Application.Doina.1?


File Info:

crc32: 19D8D0C3
md5: 0354695bd0d2e5d885717a00813ff2b6
name: 0354695BD0D2E5D885717A00813FF2B6.mlw
sha1: 5ea08d21e3fa77c3c2a6b320ce0a088b045435f0
sha256: 47f3878724b2e383c9f6294a04bfe31fc098f839134d8f7f67dc514d345c1598
sha512: e51ce8de227e5d6ff3cb2c5e0e6526e78977395c6dd7035286051ca93b6f8f659984a45890ec86a18e10e8a588c989ebc30260026a6e04031ffc94309ad5a80c
ssdeep: 393216:zY56KJzhBzwb7H34QTEwDbWYGn7so5JrppkShqgMQMZt:zY56ozwb7H34QTEwDbWYG7sorrbkShnW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) UsualsPCAP Byte 2020
InternalName: UsualsPCAP
FileVersion: 1.0.5.49
CompanyName: UsualsPCAP Byte
ProductName: UsualsPCAP
ProductVersion: 1.0.5.49
FileDescription: UsualsPCAP
OriginalFilename: UsualsPCAP
Translation: 0x0409 0x04b0

Application.Doina.1 also known as:

K7AntiVirusTrojan ( 005683811 )
LionicHacktool.Win32.PCAccelerator.3!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Application.Doina.1
ALYacGen:Variant.Application.Doina.1
CylanceUnsafe
ZillyaTool.PCAccelerator.Win32.343
AlibabaRiskWare:Win32/PCAccelerator.3781f578
K7GWTrojan ( 005683811 )
Cybereasonmalicious.bd0d2e
CyrenW32/PCAccelerate.C.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Generik.BQJWWZU
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 99)
KasperskyHoax.Win32.PCAccelerator.cdg
BitDefenderGen:Variant.Application.Doina.1
NANO-AntivirusRiskware.Win32.PCAccelerator.iutiyj
TencentWin32.Trojan-psw.Pcaccelerator.Day
Ad-AwareGen:Variant.Application.Doina.1
SophosGeneric PUA FO (PUA)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.0354695bd0d2e5d8
EmsisoftApplication.PCFixer (A)
SentinelOneStatic AI – Suspicious PE
JiangminHoax.PCAccelerator.ib
WebrootW32.Trojan.Gen
AviraTR/Redcap.myswo
Antiy-AVLTrojan/Generic.ASMalwS.308D4DF
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Application.Doina.1
AhnLab-V3Trojan/Win.Generic.R434911
McAfeeArtemis!0354695BD0D2
MAXmalware (ai score=76)
MalwarebytesPUP.Optional.PCAcceleratePro
PandaTrj/CI.A
RisingTrojan.Generic@ML.100 (RDML:CX+FL0d3v1aKTVDjL1xawQ)
FortinetPossibleThreat.MU
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Application.Doina.1?

Application.Doina.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment