Malware

Doina.22364 (B) removal

Malware Removal

The Doina.22364 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Doina.22364 (B) virus can do?

  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics

Related domains:

telete.in
apps.identrust.com

How to determine Doina.22364 (B)?


File Info:

crc32: EA789E43
md5: 072609bdc85a781bdec18a96512c4ccd
name: 072609BDC85A781BDEC18A96512C4CCD.mlw
sha1: 716e915b0d44ad935df8499ad6dc22ea63907f46
sha256: e0f5a3e15c409faf022c2f60a38572fd2eac86a40d37a29bb943151c2b3c7ae7
sha512: 384171f6442d61ea25c6124393593a0ddb9fe3f2667d857878733eeaa85e758e79641ef42d2cdea0281d63559a55685e287e70806659c55e31eaeac1e172644e
ssdeep: 12288:pANwRo+mv8QD4+0V16gME5zqhX8l03ax22Syg+Nm4H:pAT8QE+kBMEFluY5ST+/H
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: GameBox INC
FileDescription: GameBox 5 Installation
FileVersion: 5
Comments:
CompanyName: GameBox INC
Translation: 0x0409 0x04e4

Doina.22364 (B) also known as:

ALYacGen:Variant.Doina.22364
CylanceUnsafe
BitDefenderGen:Variant.Doina.22364
ESET-NOD32a variant of Win32/Spy.Raccoon.A
APEXMalicious
CynetMalicious (score: 100)
MicroWorld-eScanGen:Variant.Doina.22364
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZedlaF.34110.Jq4@aiklwbe
FireEyeGeneric.mg.072609bdc85a781b
EmsisoftGen:Variant.Doina.22364 (B)
AviraHEUR/AGEN.1142001
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Doina.D575C
GDataGen:Variant.Doina.22364
MAXmalware (ai score=84)
MalwarebytesMalware.AI.2429408844
IkarusTrojan.Win32.Meredrop
MaxSecureTrojan-Ransom.Win32.Crypmod.zfq

How to remove Doina.22364 (B)?

Doina.22364 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment