Doina.16839 removal tips

The Doina.16839 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.16839 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Doina.16839?


File Info:
name: EC094964077F3B9568D9.mlw
path: /opt/CAPEv2/storage/binaries/68a316b516bcce7e7fde6e01964808aed16068a096a50b849c691cf0a513ed8e
crc32: 2AD3BBD9
md5: ec094964077f3b9568d9ae4b0ec0d1a7
sha1: 568af76bbc1da031d720ca69b82ee592abcd8578
sha256: 68a316b516bcce7e7fde6e01964808aed16068a096a50b849c691cf0a513ed8e
sha512: c4f46662814b90c63458e65d898afdbab1a1249c57b1388adc367a1cfa43d7315a37952ce71640563416db24250c70e73a5c4ff5df8ce0f91e9dda1d648178df
ssdeep: 6144:cHLS9/HY/z6h/Ts9ORjOYSwkrVEi597Bo:cHLS9/Yys9RYSwkrVEiZo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113645DA2354782B1C62C8C30981E80F24519BC3BEEA5D6DBE7DCB1595E701E0B51FEB9
sha3_384: 282f28fb4c5a94be8d71e4e44befe54c195fa37fc4b2f21a794e81f1fb35d9d9ac5ecb4aa8e8e8080f77274ed2bed227
ep_bytes: e881030000e97afeffff558becf64508
timestamp: 2022-07-27 15:15:35

Version Info:
0: [No Data]

Doina.16839 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Doina.16839
ALYac	Gen:Variant.Doina.16839
Cylance	Unsafe
Cybereason	malicious.bbc1da
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.GIT
APEX	Malicious
BitDefender	Gen:Variant.Doina.16839
Ad-Aware	Gen:Variant.Doina.16839
Emsisoft	Gen:Variant.Doina.16839 (B)
VIPRE	Gen:Variant.Doina.16839
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.ec094964077f3b95
GData	Gen:Variant.Doina.16839
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
MAX	malware (ai score=81)
VBA32	BScope.TrojanPSW.Arkei
Rising	Trojan.Generic@AI.95 (RDML:8FdrdyTbsLw6VtcHlzoqGg)
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZexaF.34806.tuW@aCfvMHni

How to remove Doina.16839?

Doina.16839 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X