Malware

What is “Doina.18375 (B)”?

Malware Removal

The Doina.18375 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Doina.18375 (B) virus can do?

  • Creates RWX memory
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Doina.18375 (B)?


File Info:

crc32: 4F8328EE
md5: bfb04527f90d4e9bdd03b02b9461d1bc
name: BFB04527F90D4E9BDD03B02B9461D1BC.mlw
sha1: baf15f8cd4e524c3da104d40efc3df4027405b78
sha256: 60204fb46dc58b12a8ea7915aef3e78924c520985484d578f6a483d4f62f3bdb
sha512: d8e9c802309488ce446f81ed0e08c2280c47587b5ba6f8b499549bd6d6940183e32b90a9b15d54bfaba33c47b608a7c3485b60c763b6da71cfaf9fc168177232
ssdeep: 384:5zuqwj1VAau4+fuBJ9LqgcC5tAkzsNwKYSKlasZdwPCLJbt/vUIh6a/:5Kqwj1VAa7fdHNANtuvLbVv8a
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Doina.18375 (B) also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
ClamAVWin.Dropper.Tiggre-9845940-0
ALYacGen:Variant.Doina.18375
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/Blackmoon.AC.gen!Eldorado
ESET-NOD32a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
CynetMalicious (score: 100)
BitDefenderGen:Variant.Doina.18375
MicroWorld-eScanGen:Variant.Doina.18375
Ad-AwareGen:Variant.Doina.18375
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZedlaF.34790.cq4@a8DUxTk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PWSOnlineGames.pm
FireEyeGeneric.mg.bfb04527f90d4e9b
EmsisoftGen:Variant.Doina.18375 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/ATRAPS.Gen
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Doina.D47C7
GDataWin32.Trojan.Agent.WP
AhnLab-V3Trojan/Win.Generic.R429879
Acronissuspicious
McAfeeGenericRXPD-MW!BFB04527F90D
MAXmalware (ai score=82)
TrendMicro-HouseCallTROJ_GEN.R005H0CG521
RisingTrojan.Generic@ML.90 (RDML:asFyndyVsnZ1hWCfmzSHpA)
IkarusAdWare.Win32.BlackMoon
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Blackmoon
AVGWin32:MalwareX-gen [Trj]
Qihoo-360Win32/Trojan.Generic.HgkASYEA

How to remove Doina.18375 (B)?

Doina.18375 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment