Categories: Malware

Doina.42552 removal instruction

The Doina.42552 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.42552 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Deletes executed files from disk

How to determine Doina.42552?


File Info:
name: 330111EDCEEDE313CFCE.mlwpath: /opt/CAPEv2/storage/binaries/7443869c260b2dab355263df2d64b88bf15d7710ab5f0338d309ff982c9a24f0crc32: FFFD617Bmd5: 330111edceede313cfce07619cac6e0bsha1: acaf8ab045cbb11b721314d1001cedfa9e3f78b4sha256: 7443869c260b2dab355263df2d64b88bf15d7710ab5f0338d309ff982c9a24f0sha512: 286e30caea0818051801430cf8a05a013f70a85ec6b9b4d867af25869dac13ab5a0952795ac99e8680e71992770c1be6aa06ec59eade2c21358c455f7039293dssdeep: 6144:4/zFuodQTX2s1zdSGGaLbqc2afAOY9Oxd9Q1s:4/QNH5bf7d9QCtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1C854080065814431E7720A3D09E9EFA47529BD330B5599EFF7A87A3D8E302D3663396Esha3_384: 5d218b58b85fa71cd5b69243f0988d8c2216178aefaf88389b56ccb10197545b13f8e736cf5540df9d635b6d7a4841cfep_bytes: e8fa050000e988feffff3b0d74104300timestamp: 2022-08-26 07:20:52
Version Info:
CompanyName: 360.cnFileDescription: 360软件管家FileVersion: 2, 6, 0, 2140InternalName: SoftupNotify.exeLegalCopyright: (C) 360.cn Inc. All Rights Reserved.OriginalFilename: SoftupNotify.exeProductName: 360软件管家ProductVersion: 2, 6, 0, 2140Translation: 0x0804 0x04b0

Doina.42552 also known as:

Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Jaik.93273
FireEye	Generic.mg.330111edceede313
McAfee	Artemis!330111EDCEED
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.Vfkh
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	Gen:NN.ZexaE.34606.rC2@aebzpwpj
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Agentb.kwgr
BitDefender	Gen:Variant.Doina.42552
Avast	FileRepMalware [Misc]
Rising	Trojan.Agent!8.B1E (CLOUD)
Ad-Aware	Gen:Variant.Doina.42552
Emsisoft	Gen:Variant.Jaik.93273 (B)
VIPRE	Gen:Variant.Jaik.93273
McAfee-GW-Edition	Artemis!Trojan
Trapmine	suspicious.low.ml.score
Sophos	Generic PUA KM (PUA)
GData	Gen:Variant.Doina.42552
Avira	TR/Redcap.dwggv
Arcabit	Trojan.Jaik.D16C59
ZoneAlarm	Trojan.Win32.Agentb.kwgr
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Jaik.93273
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R002H09HT22
SentinelOne	Static AI – Suspicious PE
AVG	FileRepMalware [Misc]