Malware

Should I remove “Doina.15390”?

Malware Removal

The Doina.15390 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Doina.15390 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • A process created a hidden window
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Creates a copy of itself

Related domains:

iecrs.co

How to determine Doina.15390?


File Info:

crc32: 07C7B942
md5: 909125d1de7ac584c15f81a34262846f
name: 909125D1DE7AC584C15F81A34262846F.mlw
sha1: 9aa716b7da3cde71cd6bb5511a8709e50f5553e4
sha256: 1b7ab355fe28efc14c6a5a7a0f663507a6cdc921ecbadf228005d9f635852463
sha512: cc7b06b9c3c09d04db56382da513f1c1e90ae80d1f556da689c0419855c951771a02801bc0671507d6035e2819391e2ef6c4847c199c76b3bc2152dc04440f0c
ssdeep: 6144:xvxlmdFQ+vmLNnsrjBRthsLox4zFLhvMi5w76/knC5Hl:ivjj3ths4IFLhv/5wmMC5Hl
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Explorer
FileVersion: 3.2.001.001
CompanyName: Microsoft Corporation
PrivateBuild: Explorer.Exe
LegalTrademarks: xa9 Microsoft Corporation. All rights reserved.
Comments: Microsoftxae Windowsxae Operating System
ProductName: Microsoftxae Windowsxae Operating System
SpecialBuild: Microsoft Corporation
ProductVersion: 6.1.7801.1755
FileDescription: System Command Prompt
OriginalFilename: Explorer.Exe
Translation: 0x0409 0x04b0

Doina.15390 also known as:

K7AntiVirusTrojan ( 005078281 )
ALYacGen:Variant.Doina.15390
CylanceUnsafe
ZillyaTrojan.Generic.Win32.606015
SangforTrojan.Win32.Agent.tgsqu
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Wadereh.ba2d992a
K7GWTrojan ( 005078281 )
Cybereasonmalicious.1de7ac
SymantecRansom.Cerber
ESET-NOD32Win32/Wadereh.A
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 99)
KasperskyUDS:Trojan.Win32.Generic
BitDefenderGen:Variant.Doina.15390
NANO-AntivirusTrojan.Win32.Agent.elqdaj
MicroWorld-eScanGen:Variant.Doina.15390
TencentWin32.Trojan.Generic.Hryf
Ad-AwareGen:Variant.Doina.15390
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0OG921
McAfee-GW-EditionRDN/Generic.bpg
FireEyeGeneric.mg.909125d1de7ac584
EmsisoftMalware.Generic.CN1 (A)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1132350
Antiy-AVLTrojan/Generic.ASMalwS.1E6C8DF
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Skeeyah.A!rfn
GDataGen:Variant.Doina.15390
AhnLab-V3Malware/Win32.Generic.C1616108
McAfeeRDN/Generic.bpg
MAXmalware (ai score=100)
VBA32Trojan.Skeeyah
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0OG921
YandexTrojan.GenAsa!zpqggXgOALA
IkarusTrojan.Win32.Wadereh
FortinetW32/Generic!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Doina.15390?

Doina.15390 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment