Malware

Should I remove “Doina.21327”?

Malware Removal

The Doina.21327 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Doina.21327 virus can do?

  • Presents an Authenticode digital signature
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
mw.warnerproductions.com

How to determine Doina.21327?


File Info:

crc32: 2241567A
md5: 4c9b22390a80767e5703559caff03bdd
name: 4C9B22390A80767E5703559CAFF03BDD.mlw
sha1: 001100a7b24c44d699d5d21711149470e52e0488
sha256: 9d7f7c72370ec20ffa8d25341c1e94626785feb7e964005feb8a474894cfd32a
sha512: e2aafe85c4c5c7c0068d38dd714e39a9efed965d1815841e27a74e2639f72481b46ccfaebf12f495718c9149570759c67298477e68b227de6afffd1eb7a15015
ssdeep: 192:Nx3j+vEMbdJkwKdEQs6JH5OhLLxTGdeGzFRl6WKpPIKfhig1/C5cEWXSaAg2Mf3z:jab6JHwRT8TvapwKNsenvazs
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Doina.21327 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
ALYacGen:Variant.Doina.21327
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Mukeralmoh.3a98823b
K7GWTrojan ( 005807b31 )
K7AntiVirusTrojan ( 005807b31 )
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/GenCBL.AQW
AvastWin32:DangerousSig [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Doina.21327
MicroWorld-eScanGen:Variant.Doina.21327
TencentWin32.Trojan.Generic.Pftr
Ad-AwareGen:Variant.Doina.21327
ComodoMalware@#2lohk2xsflwwp
TrendMicroTROJ_FRS.0NA103H521
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.4c9b22390a80767e
EmsisoftMalCert-S.LF (A)
SentinelOneStatic AI – Suspicious PE
WebrootW32.Malware.Gen
AviraTR/Redcap.womyh
MicrosoftTrojan:Win32/Mukeralmoh.STA
ArcabitTrojan.Doina.D534F
GDataGen:Variant.Doina.21327
AhnLab-V3Trojan/Win.Generic.R435077
McAfeeArtemis!4C9B22390A80
MAXmalware (ai score=87)
VBA32Trojan.Wacatac
MalwarebytesTrojan.Downloader
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_FRS.0NA103H521
IkarusTrojan.Win32.Generic
FortinetW32/PossibleThreat
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HxUBC38A

How to remove Doina.21327?

Doina.21327 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment