Doina.59955 removal tips

The Doina.59955 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.59955 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Doina.59955?


File Info:
name: 14C498D65A41BDBD13C8.mlw
path: /opt/CAPEv2/storage/binaries/1667da4e4e5543f305e39d9f4d6d7e498948fecfa0ea38c34c589750e97d00ed
crc32: B6ED1C7A
md5: 14c498d65a41bdbd13c84ad73e78a251
sha1: 97055cacb6e01df7e4caee5d90876371e27c5035
sha256: 1667da4e4e5543f305e39d9f4d6d7e498948fecfa0ea38c34c589750e97d00ed
sha512: e6e029e9fc240a46fb2b93efcaa68c49c4bd065f96c9d5e4d564b0f517ab2bd5f1e8fc2754129627993e24e35b9c89898387a4b882a13f3bb453461aa6c7664c
ssdeep: 1536:Jl8hiWYOA/6wfuwukitETfURkDXcn57zqcTnUO9JqNW6m301iy673C:LWPA/vuwu6fURkDOJqc5yNW6m30B673C
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T150B36C2172A2C036F0AA123D44659B719A7F76318BF689C77BE4077A6F643D05E3834B
sha3_384: 4f499c659905b92f9a56257a4f4578ad746c1fc3ae0a6f58d93e5ce886468152c4e6b90af8907670bc0af0d56d1e7a5e
ep_bytes: 8bff558bec837d0c017505e8cb570000
timestamp: 2015-04-06 08:55:39

Version Info:
0: [No Data]

Doina.59955 also known as:

Lionic	Riskware.Win32.Doina.1!c
MicroWorld-eScan	Gen:Variant.Doina.59955
FireEye	Generic.mg.14c498d65a41bdbd
Skyhigh	BehavesLike.Win32.NetLoader.ch
McAfee	RDN/Generic PWS.y
Cylance	unsafe
Sangfor	Infostealer.Win32.OnLineGames.Vpzk
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	TrojanPSW:Win32/OnLineGames.d514a67d
K7GW	Password-Stealer ( 004984cc1 )
K7AntiVirus	Password-Stealer ( 004984cc1 )
Arcabit	Trojan.Doina.DEA33
BitDefenderTheta	Gen:NN.ZedlaF.36680.gu5@au8StApi
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/PSW.OnLineGames.QRT
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Doina.59955
Tencent	Malware.Win32.Gencirc.10bf0636
Emsisoft	Gen:Variant.Doina.59955 (B)
Baidu	Win32.Trojan-PSW.OLGames.ci
F-Secure	Trojan.TR/PSW.OnlineGames.zuzcx
VIPRE	Gen:Variant.Doina.59955
Sophos	Mal/Generic-S
Avira	TR/PSW.OnlineGames.zuzcx
Antiy-AVL	Trojan[PSW]/Win32.OnLineGames
Kingsoft	malware.kb.a.833
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Doina.59955
AhnLab-V3	Trojan/Win.Generic.R591844
ALYac	Gen:Variant.Doina.59955
MAX	malware (ai score=87)
DeepInstinct	MALICIOUS
Rising	Trojan.Generic@AI.100 (RDML:C/8XYeDf2Yc8TLZNzGKgcA)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Onlinegames.QRT!tr
AVG	FileRepMalware [Misc]
Avast	FileRepMalware [Misc]

How to remove Doina.59955?

Doina.59955 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X