About “Doina.1204” infection

The Doina.1204 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.1204 virus can do?

Anomalous binary characteristics

How to determine Doina.1204?


File Info:
crc32: 6A53EA27
md5: d2e4d088f3f25180a627310e81b2e1b7
name: D2E4D088F3F25180A627310E81B2E1B7.mlw
sha1: 633b858f537919a2f6f27ca3e7838c3844ee41e5
sha256: fe23e185208270dce9ddbed3a5cef1209d74bc6e1191ca84efe8469a71054468
sha512: ad04e00308ce7485a47148a6d82214b64a626c47e459aeb217033a684952ecc2c87191b3b0f937c38b4d79c87d9b751599d1f2bcba0a06a6ff18d0bfe7d285d9
ssdeep: 24576:Sq57c9IW1dXgfC/MHmgyaewsAj9Dt3YZ3y7r:SKc9IW1dXgfC/MHmgVlj9DtoZs
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Doina.1204 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Doina.1204
Cylance	Unsafe
Sangfor	Win.Worm.Pajetbin-6726648-0
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Autorun.e6ffa1d7
Baidu	Win32.Trojan.VB.t
Cyren	W64/Autorun.CP.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:VB-FBX
ClamAV	Win.Ransomware.WannaCry-9856297-0
MicroWorld-eScan	Gen:Variant.Doina.1204
Tencent	Malware.Win32.Gencirc.10ce5fc1
McAfee-GW-Edition	BehavesLike.Win64.Autorun.tm
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!D2E4D088F3F2
Malwarebytes	VB.Virus.FileInfector.DDS
Ikarus	Trojan.Autorun
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Autorun.CP!tr
AVG	Win32:VB-FBX
Paloalto	generic.ml
Qihoo-360	Win64/Trojan.Generic.H8oA1HsA

How to remove Doina.1204?

Doina.1204 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X