Malware

Doina.69854 removal guide

Malware Removal

The Doina.69854 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Doina.69854 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Doina.69854?


File Info:

name: 22E6522B1A6BD1397F6F.mlw
path: /opt/CAPEv2/storage/binaries/17465fdb9294f332d2a288b67dc8436984eba011c136e2be57abbe1987faeedf
crc32: F6F16998
md5: 22e6522b1a6bd1397f6f7a203f2a4ca1
sha1: 4371f79dcad18a13a6a4e19400ae07aad21eedea
sha256: 17465fdb9294f332d2a288b67dc8436984eba011c136e2be57abbe1987faeedf
sha512: 86236ed13df9d248dd5af8a82ddec57cda6f50c230cedb122fe979a25d3a7e3a1d171c49965986d2ccc3579098256befb5bbc1be3c5e256629115bd75301326a
ssdeep: 768:/HoDWCWO28+lPP3lLuzZPKqQt/LtHgUjURZ:/IDWVC+lPP3lLuBZQxeUo
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1C4E2B6997E444CEBE650173890E6C7762ABCB151CA234F62F660B7308A337A5315B26F
sha3_384: 5fd6921c174759d7191690caea6ebe9d8efbacbd8abd9afd7d9fefbf45df9d8dea05354fe4172f25daf535fb2928568f
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 10:25:43

Version Info:

0: [No Data]

Doina.69854 also known as:

LionicTrojan.Win32.Agent.Y!c
MicroWorld-eScanGen:Variant.Doina.69854
FireEyeGen:Variant.Doina.69854
SkyhighBehavesLike.Win32.Injector.nm
McAfeeGenericRXWN-OS!22E6522B1A6B
VIPREGen:Variant.Doina.69854
SangforTrojan.Win32.Agent.Vfbz
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Generic.b8cbb109
K7GWTrojan ( 005b1a3c1 )
K7AntiVirusTrojan ( 005b1a3c1 )
ArcabitTrojan.Doina.D110DE
BitDefenderThetaAI:Packer.C39293541E
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent_AGen.DEA
KasperskyUDS:Trojan-Dropper.Win32.Agent
BitDefenderGen:Variant.Doina.69854
AvastWin32:TrojanX-gen [Trj]
RisingTrojan.Agent!8.B1E (TFE:5:XvIzrRsjvRP)
EmsisoftGen:Variant.Doina.69854 (B)
F-SecureTrojan.TR/Agent_AGen.mzmjk
SophosMal/Generic-S
IkarusTrojan.Win32.Agent
GoogleDetected
AviraTR/Agent_AGen.mzmjk
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmUDS:Trojan-Dropper.Win32.Agent
GDataGen:Variant.Doina.69854
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.TrojanX-gen.R634578
ALYacGen:Trojan.Heur.PT.c46@aqeLSXh
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002H07BA24
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Doina.69854?

Doina.69854 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment