Malware

Doina.544 removal tips

Malware Removal

The Doina.544 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Doina.544 virus can do?

  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Doina.544?



File Info:

crc32: 1717C8A2
md5: 900925aa625cc2649e4af6a886e73cd5
name: 900925AA625CC2649E4AF6A886E73CD5.mlw
sha1: fc030dbd5f73a90d31ad2120ccd94614b7c6b647
sha256: c71263f025ce2c9385a0f7a4240ea0b399d897488f4f4658aa7b898b4f7864bd
sha512: a6d49a98cce478824c82bb8905747533118757cf2f44ff5d2a70d82f1acb0d46b1fa8323d3cdaeb420181cf292d6eeccc49b7ede1c1d1d12ee1d2dc1c2c08721
ssdeep: 49152:L1maC9OljU4x5JfNSv1u91RDHRTcRCDViCwrskyF2pfFudEs82unlVz/tT3ZbcwV:xmaCw1Vf8tu9nbRTirsn2tIdEK8rtV/V
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Administrator
ProductVersion: 1.0.0.0
FileVersion: 1.0.0.0
FileDescription: 
Translation: 0x0000 0x04b0

Doina.544 also known as:

Elasticmalicious (high confidence)
McAfeeGenericRXAA-FA!900925AA625C
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0056e5201 )
BitDefenderGen:Variant.Doina.544
K7GWTrojan ( 0056e5201 )
Cybereasonmalicious.a625cc
CyrenW32/Trojan.RUGI-8262
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.AntiVM.vho
NANO-AntivirusTrojan.Win32.AntiVM.imjvbr
MicroWorld-eScanGen:Variant.Doina.544
SophosMal/Generic-S
ZillyaDropper.Scrop.Win32.1488
McAfee-GW-EditionBehavesLike.Win32.BadFile.wc
FireEyeGeneric.mg.900925aa625cc264
EmsisoftGen:Variant.Doina.544 (B)
SentinelOneStatic AI – Suspicious PE
MAXmalware (ai score=86)
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Doina.544
ZoneAlarmHEUR:Trojan-PSW.Win32.Coins.gen
GDataGen:Variant.Mikey.113188
ALYacGen:Variant.Mikey.113188
VBA32BScope.TrojanDropper.Injector
RisingDownloader.Agent!8.B23 (CLOUD)
IkarusTrojan.Win32.Themida
BitDefenderThetaGen:NN.ZexaF.34590.ZzWaaeGtGboi
AVGWin32:Trojan-gen

How to remove Doina.544?

Doina.544 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment