Should I remove “Doina.10271 (B)”?

The Doina.10271 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.10271 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Checks adapter addresses which can be used to detect virtual network interfaces
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Created a process from a suspicious location
• Attempts to modify proxy settings
• Deletes executed files from disk
• Anomalous binary characteristics

How to determine Doina.10271 (B)?

File Info:
name: BC006639DAE8E1A35593.mlw
path: /opt/CAPEv2/storage/binaries/a51d14066efef3214fd0290d59490de5ee0e5fa439cd985fd6718320493afa71
crc32: 7B638CA6
md5: bc006639dae8e1a35593df7cb94e3aab
sha1: b5d62c4b8faedde37502f6942700f62348725f7c
sha256: a51d14066efef3214fd0290d59490de5ee0e5fa439cd985fd6718320493afa71
sha512: 17be67e0c8ca6d865cc7934cb73c50891efe4eea91eec714c28af4d8b05cb7ea813998ac0937746e414fad64b8e827ecd7915704e048137c159c1569b8944ca7
ssdeep: 196608:UeVUKSN6c12oyF0R9ZGlvNxg46SZfeC6fNVWqnFetK2BzPW++4+FmK2GHxFdU5Gh:5VjSEdi9Zig47feCAPkzWp4M676t
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T178D63305B757D471D86900B248254EBB4E3ABC22C37CD1EBAFD07A984CB03F5A73A55A
sha3_384: ee5ec661ffb71038f52499bec05a97ea5c3d02c98093fd09bcf200a4e715b8f792f9ef20bd8a8a96a5db45bcc8d3c2ed
ep_bytes: e8a61d0000e989feffff8bff565733f6
timestamp: 2015-02-09 21:57:00

Version Info:
Comments: Created with Setup Factory
FileDescription: Setup Application
FileVersion: 9.5.0.0
InternalName: suf_launch
LegalCopyright: Setup Engine Copyright © 2004-2015 Indigo Rose Corporation
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
OriginalFilename: suf_launch.exe
ProductName: Setup Factory Runtime
ProductVersion: 9.5.0.0
Translation: 0x0409 0x04e4

Doina.10271 (B) also known as:

How to remove Doina.10271 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.