What is “Doina.16327”?

The Doina.16327 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.16327 virus can do?

Unconventionial language used in binary resources: Korean
Network activity detected but not expressed in API logs

How to determine Doina.16327?


File Info:
crc32: E496705B
md5: 129a0fb9abe7692411c03db076d95db2
name: 129A0FB9ABE7692411C03DB076D95DB2.mlw
sha1: 13ddddc5cb4c204ab89cbe72cd9286a448b4eb5d
sha256: 1a2ba161435ff8303d95a15bbf267c5263cba69de5b3da99ccb429f437f6ea59
sha512: 071bbade2e4e476cc2df6f600aae734a6f82e36048ed8a502d224383a7ae169b202c22068dd4aec3fff8cb068ab8b8a29db0f6bb396a74c37cee335d3a6c7c41
ssdeep: 6144:WR7r0IfzttHDWLroM8PsDNUAEXU4281w3HVVjohc6tl0fH/C:QPDWesxUAEXU428EVjoRl
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: All rights reserved.
InternalName:  
FileVersion: 1.0.0.2
Comments: User Value Improvement
ProductName:  
FileDescription: Windows Software
OriginalFilename:  
Translation: 0x0412 0x03b5

Doina.16327 also known as:

Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad2.45498
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Doina.16327
Cylance	Unsafe
Zillya	Adware.Kraddare.Win32.5595
Sangfor	Trojan.Win32.Save.a
Alibaba	AdWare:Win32/Kraddare.29002d26
Cybereason	malicious.9abe76
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Kraddare.DA
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
BitDefender	Gen:Variant.Doina.16327
NANO-Antivirus	Trojan.Win32.DownLoad2.hbolzi
ViRobot	Trojan.Win32.A.FakeAV.184320.L
MicroWorld-eScan	Gen:Variant.Doina.16327
Tencent	Malware.Win32.Gencirc.10c134cf
Ad-Aware	Gen:Variant.Doina.16327
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34236.zu0@a4HpzfgO
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gm
FireEye	Generic.mg.129a0fb9abe76924
Emsisoft	Gen:Variant.Doina.16327 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Fakeav.ajoz
Avira	HEUR/AGEN.1120843
eGambit	Generic.Malware
Antiy-AVL	Trojan/Generic.ASMalwS.125070C
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Doina.16327
AhnLab-V3	PUP/Win32.Agent.C1515367
McAfee	GenericRXKT-LT!129A0FB9ABE7
MAX	malware (ai score=99)
VBA32	BScope.Trojan.Download
Malwarebytes	Malware.Heuristic.1006
Rising	Trojan.Generic@ML.88 (RDML:PTyNR4PwniWyuTXjvcWoVg)
Yandex	Trojan.GenAsa!xv76jJqRwfM
Ikarus	Trojan.Win32.FakeAV
Fortinet	Adware/WiseLook.C
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Doina.16327?

Doina.16327 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X