Doina.32297 information

The Doina.32297 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.32297 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Doina.32297?


File Info:
name: A0F3A80E11BAA7D0D8C0.mlw
path: /opt/CAPEv2/storage/binaries/f81b5e436640933b290e22721401176798c78646c5b1f95c5d22814db5c39a68
crc32: B7E6F79C
md5: a0f3a80e11baa7d0d8c00d2e30a48c1f
sha1: 2acd03412631e2e66f828c644e3696db7ca346a6
sha256: f81b5e436640933b290e22721401176798c78646c5b1f95c5d22814db5c39a68
sha512: 1dbe4ceeb4612a96565b2f27da4fc07ec29d46cb323c05c7be904ecf38f94dfd59e63f983de4069027b93415b571015667ceb666af7989f3612e32131440077e
ssdeep: 1536:y8qYUQg5ff7c40VQ8qYUQg5ff7c404t4ft4:tURff7yURff7NSfS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DF836C5BFAD0CDF2C401CAFD4E59C25DAB3A32302E18C069B9A65FCDFE69252651C14B
sha3_384: 07cd105702f96c4d39059d1bda200cd923ab099ff8a50d76c4a019941ec03a64159b699003c284b7c3a2e25b28fe2aab
ep_bytes: ffff8d45fce82af2ffff81fe00879303
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Doina.32297 also known as:

Bkav	W32.AIDetectMalware
DrWeb	Win32.HLLP.Siggen.10
MicroWorld-eScan	Gen:Variant.Doina.32297
ClamAV	Win.Trojan.Toffus-1
FireEye	Generic.mg.a0f3a80e11baa7d0
CAT-QuickHeal	W32.Vimm.A
ALYac	Gen:Variant.Doina.32297
Cylance	unsafe
VIPRE	Gen:Variant.Doina.32297
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.e11baa
BitDefenderTheta	Gen:NN.ZelphiF.36250.bGW@aGcg4mp
Cyren	W32/Toffus.GUHR-2180
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanDropper.Delf.NKE
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Virus.Win32.Toffus.a
BitDefender	Gen:Variant.Doina.32297
NANO-Antivirus	Trojan.Win32.Delf.pauds
Avast	Win32:Toffus
Sophos	Mal/Generic-S
F-Secure	Malware.W32/Toffus.B
TrendMicro	PE_TOFUS.DAM
McAfee-GW-Edition	BehavesLike.Win32.Generic.mt
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Doina.32297 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Doina.32297
Avira	W32/Toffus.B
Antiy-AVL	GrayWare/Win32.Wacapew
Arcabit	Trojan.Doina.D7E29
ZoneAlarm	UDS:Virus.Win32.Toffus.a
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	GenericRXWB-BL!A0F3A80E11BA
MAX	malware (ai score=82)
Malwarebytes	Generic.Trojan.Dropper.DDS
TrendMicro-HouseCall	PE_TOFUS.DAM
Rising	Trojan.Generic@AI.99 (RDML:I/sT6lsj8zQGi50fdAnV8A)
Yandex	Win32.Toffus.A
Ikarus	Trojan-Dropper.Delf
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Toffus
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Doina.32297?

Doina.32297 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X