Doina.61915 removal

The Doina.61915 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.61915 virus can do?

Unconventionial binary language: Polish
Unconventionial language used in binary resources: Polish
Authenticode signature is invalid
Behavioural detection: Injection (inter-process)

How to determine Doina.61915?


File Info:
name: 473E4646CB417ECC56DF.mlw
path: /opt/CAPEv2/storage/binaries/1fe1c81f026383bcc0dcaf7ebc5cb53b0cc3a8d90474607f6b21024de862c246
crc32: 1C803FBF
md5: 473e4646cb417ecc56df0a322055245a
sha1: 41bcf738ca06d617b6a47f6fd727df495949490a
sha256: 1fe1c81f026383bcc0dcaf7ebc5cb53b0cc3a8d90474607f6b21024de862c246
sha512: d18ec8cb751ad758d8d9321c56ce0da0925c6f5e4368dabed724c1cd1c40761d24ccf0f0784a8b1235fb26cd67d1cf3759ecac9f60a23b055349c3ba5199386a
ssdeep: 3072:aHy1RvO32OaqkQvPZ5CJ72M4JbUA0jsWIU1Yn0OKu0we7M0c/t6mC0v:bv8atkPZ5CJ7ubU9jtYn0OKuELk
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1C4349D01FAC7C477DF8F02B840668B1E237975476F60DAE7EB686F5B49212C19C32296
sha3_384: e3976512b841ddffd71322a37d17f2e4dad7fd36cb2e37fb71277ab3f2d874430bd27e7018d2feaeefef7308f7abd2e2
ep_bytes: 837c2408017505e873780000ff742404
timestamp: 2024-03-10 22:01:07

Version Info:
FileDescription: CacheD Extension to support IlExt
FileVersion: 1, 2, 6, 5
InternalName: CachedEx
LegalCopyright: Copyright (C) Vanganth 2009
OriginalFilename: CachedEx.dll
ProductName:  CachedEx
ProductVersion: 1, 2, 6, 5
Translation: 0x0415 0x04b0

Doina.61915 also known as:

Bkav	W32.Common.6A0E6F58
Lionic	Trojan.Win32.Inject.1b!c
MicroWorld-eScan	Gen:Variant.Doina.61915
FireEye	Gen:Variant.Doina.61915
Skyhigh	BehavesLike.Win32.BadFile.dh
McAfee	Artemis!473E4646CB41
Sangfor	Trojan.Win32.Agent.Varp
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Doina.DF1DB
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H07CP24
Kaspersky	HEUR:Trojan.Win32.Inject.gen
BitDefender	Gen:Variant.Doina.61915
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Doina.61915 (B)
F-Secure	Trojan.TR/Inject.vwvuf
VIPRE	Gen:Variant.Doina.61915
Avira	TR/Inject.vwvuf
Antiy-AVL	Trojan/Win32.Inject
Kingsoft	Win32.Trojan.Inject.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.Win32.Inject.gen
GData	Gen:Variant.Doina.61915
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Generic.C5605269
VBA32	BScope.Trojan.Invader
ALYac	Gen:Variant.Doina.61915
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Trojan.Generic@AI.86 (RDML:ESOQWyKwzor6XbZ3/D03Gg)
MaxSecure	Trojan.W32.Inject.gen
Fortinet	W32/PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Doina

How to remove Doina.61915?

Doina.61915 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X