Categories: Malware

Doina.24859 removal guide

The Doina.24859 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.24859 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings
Harvests cookies for information gathering

How to determine Doina.24859?


File Info:
name: 10F9E118B92270C99FEA.mlwpath: /opt/CAPEv2/storage/binaries/4064e65b715e001068bd786fd887cba44d968372d904c321cf870cd4deed40d0crc32: AEC97381md5: 10f9e118b92270c99fea75dfeaf347e0sha1: 5532f377cc8b0ae23439942de72ce9273858565fsha256: 4064e65b715e001068bd786fd887cba44d968372d904c321cf870cd4deed40d0sha512: 522ad34b92c79997356d9161d2b469b3486658d690f984c245b5ae05b2e456664f7b635f8d48d9c85a0dc94f3856175c5aaedff053c881ef959e0663daf07093ssdeep: 12288:9pFkWfzsi1qgvFy0DnSvcrCn8+zaxArF5etxCs:9puBi1rvFyJErESN1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14BE47E1779B0F07ACDB253F00A629AADA2B5BC504E7A448F67853B1C2E378C49737275sha3_384: b651144926f111740abdcc495d851c5e4771138b52110acfc8382f3e2803e0438ddf23717acbcd1df43b9e91621e848fep_bytes: 6a6068900c4700e893130000bf940000timestamp: 2013-03-12 08:14:18
Version Info:
CompanyName: 汇通财经FileVersion: 1, 2, 3, 25LegalCopyright: 版权所有 (C) 2011ProductName: 汇迅宝ProductVersion: 1, 2, 3, 25Translation: 0x0804 0x04b0

Doina.24859 also known as:

Lionic	Trojan.Win32.Generic.a!c
MicroWorld-eScan	Gen:Variant.Doina.24859
FireEye	Generic.mg.10f9e118b92270c9
ALYac	Gen:Variant.Doina.24859
Cylance	Unsafe
VIPRE	Gen:Variant.Doina.24859
Sangfor	Trojan.Win32.Generic.buxin
Alibaba	TrojanDownloader:Win32/Generic.dd397943
Cybereason	malicious.8b9227
BitDefenderTheta	Gen:NN.ZexaF.34784.Pq0@aWeWXVob
VirIT	Trojan.Win32.Generic.CLMV
Cyren	W32/Heuristic-217!Eldorado
Symantec	Trojan.Gen.MBT
Kaspersky	HEUR:Trojan-Downloader.Win32.Generic
BitDefender	Gen:Variant.Doina.24859
NANO-Antivirus	Trojan.Win32.Autoruner1.cucozh
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.114de519
Emsisoft	Gen:Variant.Doina.24859 (B)
Comodo	Malware@#1lb6b65pwg2ak
Zillya	Downloader.Generic.Win32.11655
McAfee-GW-Edition	GenericR-HYU!10F9E118B922
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
GData	Gen:Variant.Doina.24859
Jiangmin	TrojanDownloader.Generic.atge
Webroot	W32.Downloader.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.3304
Arcabit	Trojan.Doina.D611B
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Malware/Win.Generic.R374666
McAfee	GenericR-HYU!10F9E118B922
VBA32	suspected of Trojan.Downloader.gen
Rising	Downloader.Generic!8.141 (CLOUD)
Yandex	Trojan.Agent!WPa3lr63H84
AVG	Win32:Malware-gen
Panda	Trj/CI.A