Categories: Malware

Doina.10636 removal

The Doina.10636 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.10636 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

ion880.nanuminet.co.kr

How to determine Doina.10636?


File Info:
crc32: EF2CF2A1md5: 0c4e252e790553039b94221350b4c24ename: 0C4E252E790553039B94221350B4C24E.mlwsha1: 81a333f4005048b7c1f80b2cb260e3f0273ba7b1sha256: 9bf2ef77ba1a840077456327d09891e003c3ebf86167007c5a4dd8f35fc4257csha512: 13f3e2169add89b8b7f9977d54b5296170a210673b7feb9928ab001cb031c66202e053b579435db7942bf5218714c2cd7b92d19e2c8604efeff80883a9f61dcessdeep: 3072:qgXdZt9P6D3XJE45Rg/ThwkiKYSAZ8sNzQI:qe34+UK5lsNXtype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

Doina.10636 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Adware ( 005702661 )
DrWeb	Adware.Downware.2879
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Doina.10636
Cylance	Unsafe
Zillya	Adware.Kraddare.Win32.2271
Sangfor	Adware.Win32.Agent.atBNN
Alibaba	Ransom:Win32/Blocker.00515550
K7GW	Adware ( 005702661 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Kraddare.KE
APEX	Malicious
Avast	Win32:Adware-BNN [Adw]
Kaspersky	Trojan-Ransom.Win32.Blocker.kpha
BitDefender	Gen:Variant.Doina.10636
NANO-Antivirus	Riskware.Win32.Kraddare.fenysr
ViRobot	Adware.Mspop.104873
MicroWorld-eScan	Gen:Variant.Doina.10636
Tencent	Win32.Adware.Kraddare.Gcc
Sophos	Generic PUA IB (PUA)
Comodo	ApplicUnwnt@#1tm3rhkq6wx7j
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_SPNR.3AGP14
McAfee-GW-Edition	PUP-XFZ-WY
FireEye	Gen:Variant.Doina.10636
Emsisoft	Gen:Variant.Doina.10636 (B)
Jiangmin	AdWare/Kraddare.ec
Webroot	W32.Trojan.Genkd
Avira	HEUR/AGEN.1111377
Antiy-AVL	Trojan/Generic.ASMalwS.98F236
Kingsoft	Win32.Troj.Kraddare.ot.(kcloud)
Microsoft	Trojan:Win32/Wacatac.A!ml
AegisLab	Adware.Win32.Kraddare.2!c
ZoneAlarm	Trojan-Ransom.Win32.Blocker.kpha
GData	Gen:Variant.Doina.10636
AhnLab-V3	Dropper/Bho.104873
McAfee	Artemis!0C4E252E7905
MAX	malware (ai score=99)
VBA32	BScope.TrojanBanker.Banbra
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_SPNR.3AGP14
Rising	PUF.Vigua!8.10186 (TFE:5:rOQFr8ZTvpO)
Ikarus	Trojan.Win32.BHO.bn
Fortinet	Riskware/Kraddare
AVG	Win32:Adware-BNN [Adw]
Paloalto	generic.ml