Doris.50 removal instruction

The Doris.50 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doris.50 virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Doris.50?


File Info:
crc32: 4476BA9C
md5: 78184a971d80c6dcebede28d081fe2ff
name: 78184A971D80C6DCEBEDE28D081FE2FF.mlw
sha1: 3afdacd03deffec99fe9ec82ff2ceae6baeb606f
sha256: fcad32ff4f4b31698f992d7ec2e7ca47828b33e0317885ebc15287b1e0f188cb
sha512: a693d863ee4388679ce41fbf82b052c2caca879d4048e215629dc442911293b8b12cd522d6489709c41d19813499a90618ca3534730e03b9747c9bc5cd2f207d
ssdeep: 192:6Ybr5HRL66Cfieu9w1Bh5TyAGgfc2Lw0pzNcd80W3Nz5fw4PEnBiqqHV:6Yf5Ht66Cs9shRFc2LBpzNcqv3Nxw4P5
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Doris.50 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Doris.50
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.71d80c
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ClipBanker.JB
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan-Spy.Win32.Clipper.gen
BitDefender	Gen:Variant.Doris.50
MicroWorld-eScan	Gen:Variant.Doris.50
Ad-Aware	Gen:Variant.Doris.50
Sophos	ML/PE-A
FireEye	Generic.mg.78184a971d80c6dc
Emsisoft	Gen:Variant.Doris.50 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Doris.50
GData	Gen:Variant.Doris.50
MAX	malware (ai score=82)
Malwarebytes	Malware.Heuristic.1003
Ikarus	Trojan.Zlob
AVG	FileRepMalware
Qihoo-360	Win32/Trojan.Generic.HwsBZ9sA

How to remove Doris.50?

Doris.50 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X