Categories: Malware

Doina.9716 removal instruction

The Doina.9716 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.9716 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Operates on local firewall’s policies and settings
Yara detections observed in process dumps, payloads or dropped files

How to determine Doina.9716?


File Info:
name: 7BD5BC4979AB05F4EA69.mlwpath: /opt/CAPEv2/storage/binaries/f12822d8013d4678e6547bc43b3372342ba37394ff846935ef5e67e3a95919c2crc32: 6B0BE11Amd5: 7bd5bc4979ab05f4ea69297080cddab4sha1: e762e5d51288c4498d4bf92f0ea26d195e1ea981sha256: f12822d8013d4678e6547bc43b3372342ba37394ff846935ef5e67e3a95919c2sha512: c7a49d0c4f7d6be6667795f196de38a414f1d53342a188877bfd8bf738dfdb17706aa00dab7c4ee57be6e65ebc2030533e7376986873332be115f6aa0c82f6b6ssdeep: 384:bEtOfGiLwIyYBMihAiiP+LJfCP4BK5thTRcs6ide+GvN+:AtOfG6/yYBMihAHPU5CP5jRcMdel1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T146A2C00ABB5C6658E0CB077694A74AD9CBAD55291AB8830F253414B70EF3B444E023F7sha3_384: c5b108d924295071c4916ff68c1236e4f1c2a8b943963fcc5d80c86efb2e8776937b0e58d286326d575f805583732ae6ep_bytes: 60be00b040008dbe0060ffff5783cdfftimestamp: 2012-05-09 10:20:45
Version Info:
Comments: CompanyName: SYDH Technologies IncFileDescription: Asyhbd Sydlff InfFileVersion: 5.0.0ProductVersion: 5.1.0InternalName: LegalCopyright: Copyright 2009-2011 SYDH Technologies IncLegalTrademarks: SYDHOriginalFilename: AsyhbdSydlff.exePrivateBuild: ProductName: SYDHSpecialBuild: Translation: 0x0409 0x04e4

Doina.9716 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lE7w
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 99)
FireEye	Gen:Variant.Doina.9716
CAT-QuickHeal	TrojanDownloader.Kagany.E3
Skyhigh	Generic.ddc
ALYac	Gen:Variant.Doina.9716
Cylance	unsafe
Zillya	Downloader.Agent.Win32.136343
Sangfor	Downloader.Win32.Agent.V5bq
K7AntiVirus	Hacktool ( 005288ca1 )
Alibaba	TrojanDownloader:Win32/Karagany.f95675e9
K7GW	Hacktool ( 005288ca1 )
Arcabit	Trojan.Doina.D25F4
VirIT	Trojan.Win32.Generic.CFEJ
Symantec	Trojan Horse
ESET-NOD32	Win32/TrojanDownloader.Agent.QBO
APEX	Malicious
Avast	Win32:Dh-A [Heur]
ClamAV	Win.Trojan.Karagany-1253
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Doina.9716
NANO-Antivirus	Trojan.Win32.Injecter.btums
ViRobot	Trojan.Win32.Agent.23040.DN
MicroWorld-eScan	Gen:Variant.Doina.9716
Tencent	Win32.Trojan-Downloader.Oader.Jcnw
Emsisoft	Gen:Variant.Doina.9716 (B)
F-Secure	Trojan.TR/Gendal.5858282
DrWeb	Trojan.DownLoader1.13618
VIPRE	Gen:Variant.Doina.9716
TrendMicro	TROJ_DLOADER.SM2
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Paloalto	generic.ml
Jiangmin	TrojanDownloader.Injecter.clw
Webroot	W32.Malware.gen
Varist	W32/A-fe747f60!Eldorado
Avira	TR/Gendal.5858282
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Lac
Kingsoft	Win32.Trojan.Generic.a
Xcitium	TrojWare.Win32.TrojanDownloader.Elteder.A@4s4n55
Microsoft	Trojan:Win32/Vindor!pz
SUPERAntiSpyware	Trojan.Agent/Gen-Faldesc[Cont]
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Doina.9716
Google	Detected
AhnLab-V3	Trojan/Win32.CSon.R8230
McAfee	Generic.ddc
VBA32	Trojan.Serious.5505
Malwarebytes	Malware.AI.243750749
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_DLOADER.SM2
Rising	Trojan.Win32.Fednu.fjy (CLOUD)
Yandex	Trojan.GenAsa!2Z6HFMbTn2Y
Ikarus	Trojan-Downloader.Win32.Karagany
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Agent.QFS!tr.dldr
BitDefenderTheta	Gen:NN.ZexaF.36804.bmKfamsDR1li
AVG	Win32:Dh-A [Heur]
DeepInstinct	MALICIOUS
alibabacloud	Trojan[downloader]:Win/Doina