Backdoor:Win64/Donipye.STX removal tips

The Backdoor:Win64/Donipye.STX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win64/Donipye.STX virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Backdoor:Win64/Donipye.STX?


File Info:
crc32: 5BCE0666
md5: 79341568a1fc1199d6c7fc66ddc016de
name: 79341568A1FC1199D6C7FC66DDC016DE.mlw
sha1: 5a010d9e20409ef4e6e120fb6c1eebc6d1c4f4e0
sha256: 6a127acac9a7ad6a505e776cd9f0c0462517e86ad9d2d86e9f8bbb8e1f860e92
sha512: c1a9df274833bad6102aab47c1a91a245dbf107a54fd9dd14abfae63da497913f78fffbdf395157f40aa46074c6a7d31d9a1fe689319c2e03bcf7de9d720ebb5
ssdeep: 12288:Z6V/j5YFjRUR7xcWV1q8tp2iQUZy4KiHW2Z1P6JPp7STC6A4PkGgJt+CQn4ZbNv:GlY1RaxVdtVhuAEBH9C
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Backdoor:Win64/Donipye.STX also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Malware.ServHelper-9835385-1
ALYac	Gen:Variant.Bulz.159724
Zillya	Backdoor.ServHelper.Win32.80
CrowdStrike	win/malicious_confidence_80% (W)
Cyren	W64/Agent.CGF.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win64/Delf.K
APEX	Malicious
Avast	Win64:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.Win32.ServHelper.vho
BitDefender	Gen:Variant.Bulz.159724
MicroWorld-eScan	Gen:Variant.Bulz.159724
Ad-Aware	Gen:Variant.Bulz.159724
FireEye	Generic.mg.79341568a1fc1199
Emsisoft	Trojan.Agent (A)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1141476
Antiy-AVL	Trojan/Generic.ASMalwS.3110AEB
Microsoft	Backdoor:Win64/Donipye.STX
GData	Win64.Trojan.BackdoorTrmnl.B
AhnLab-V3	Malware/Win64.Generic.C4264902
McAfee	Artemis!79341568A1FC
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.3973245470
Yandex	Trojan.GenAsa!aK2VdBqQ8Pw
Ikarus	Trojan.Win64.Delf
Fortinet	W64/ServHelper.VHO!tr
AVG	Win64:TrojanX-gen [Trj]

How to remove Backdoor:Win64/Donipye.STX?

Backdoor:Win64/Donipye.STX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X