Doina.10864 removal

The Doina.10864 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.10864 virus can do?

Creates RWX memory
Mimics the system’s user agent string for its own requests
A process attempted to delay the analysis task.
Attempts to connect to a dead IP:Port (6 unique times)
Performs some HTTP requests
Checks the CPU name from registry, possibly for anti-virtualization
Uses suspicious command line tools or Windows utilities

Related domains:

buketlist.xyz

apps.identrust.com

crl.identrust.com

x1.c.lencr.org

r3.o.lencr.org

How to determine Doina.10864?


File Info:
crc32: 7325AF31
md5: 2a979e368e4f423b2421cd556ac598d8
name: 2A979E368E4F423B2421CD556AC598D8.mlw
sha1: 7dc0648dc07edeb682fe837bdb36b8ef625b4d65
sha256: efb18bac5fee1864a6d43b45455bc3a8e6cf23747193d819eb4a83d917f4c55d
sha512: deaed2429d039851ee61084b212bf60a0a54c3477480466fec7e583607ef1233e47f791afda14ffb790275677d7111bbfe4a1dbf209e9baf038582da51af8755
ssdeep: 12288:l6q0QGYu33IGbMBS5xPMOBfeKEloutyCWG6vF767ZXoY9C3dV1D5:4qzsMOBfeKEltWGAFu4ddHD5
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2019
InternalName: JacaPM.dll
FileVersion: 15.5.2.0
CompanyName: JacaPM.dll
ProductName: JacaPM.dll
ProductVersion: 15.5.2.0
FileDescription: JacaPM.dll
OriginalFilename: JacaPM.dll
Translation: 0x0409 0x04b0

Doina.10864 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Doina.10864
Zillya	Trojan.APosT.Win32.1831
K7GW	Spyware ( 0057a2251 )
K7AntiVirus	Spyware ( 0057a2251 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Agent.QCL
APEX	Malicious
Avast	Win32:SpywareX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.APosT.gen
BitDefender	Gen:Variant.Doina.10864
NANO-Antivirus	Trojan.Win32.APosT.itxzjs
MicroWorld-eScan	Gen:Variant.Doina.10864
Ad-Aware	Gen:Variant.Doina.10864
BitDefenderTheta	Gen:NN.ZedlaF.34796.Ru8@aSvVPdpi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.BadFile.bh
FireEye	Gen:Variant.Doina.10864
Emsisoft	Gen:Variant.Doina.10864 (B)
Avira	TR/AD.SatanProRansom.dbiga
Antiy-AVL	Trojan/Generic.ASMalwS.31EAA36
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Doina.D2A70
ZoneAlarm	HEUR:Trojan.Win32.APosT.gen
GData	Gen:Variant.Doina.10864
McAfee	Artemis!2A979E368E4F
MAX	malware (ai score=84)
VBA32	Trojan.APosT
Malwarebytes	Malware.AI.363869233
Panda	Trj/GdSda.A
Yandex	Trojan.APosT!IOoL60lyc/I
Fortinet	W32/APosT.QCL!tr
AVG	Win32:SpywareX-gen [Trj]

How to remove Doina.10864?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.