Doina.8959 (B) removal

The Doina.8959 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.8959 (B) virus can do?

• Attempts to connect to a dead IP:Port (1 unique times)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Unconventionial binary language: Portuguese (Brazil)
• Unconventionial language used in binary resources: Portuguese (Brazilian)
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Deletes its original binary from disk
• Installs itself for autorun at Windows startup
• Anomalous binary characteristics

How to determine Doina.8959 (B)?

File Info:
name: 4EC3C80ADCAE94D28617.mlw
path: /opt/CAPEv2/storage/binaries/99d16cec1782d496317e1735e09e0da7fed19d9fb4485e026366d5e75649e355
crc32: 38DD7CFD
md5: 4ec3c80adcae94d286179321874b169b
sha1: 5596d621fdf456594612c614638be1a7d29a3e50
sha256: 99d16cec1782d496317e1735e09e0da7fed19d9fb4485e026366d5e75649e355
sha512: 7512443e5a2c0996f92c2028f6edcb4ca7fa813ce0ccb735d05ce2d0b0fbcba99433af73a9680a05125c5666a89884de92e450d5c3647dd7c37c61ae08feda3a
ssdeep: 24576:dToK6Jyl+oprh8TwczWFc9krBTT9g3QNZyToK6Jyl+oprh8HwczdicPrBTTAA3Qy:dTo9xopFjBnO3MZyTo9xopFgBnZ3MZu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4A53B7EBB8DE536C8214ABC4DAFE5D5980939323C085847F6849F4C6E355E2372AE43
sha3_384: a0e879da88f463113c77999db9b409c10f13d33b946b60fbd3ad7b104e2f0ba1b23f2c09210a8998075118b2f85b1cef
ep_bytes: 55545d83c4f05356b874814e00e8caea
timestamp: 1992-06-19 22:22:17

Version Info:
CompanyName: HP Printers
FileDescription: Utility printer driver
FileVersion: 1.0.0.51
InternalName: 
LegalCopyright: 
LegalTrademarks: HP Printers
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Translation: 0x0416 0x04e4

Doina.8959 (B) also known as:

How to remove Doina.8959 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.