Categories: Malware

Should I remove “Doris.7309”?

The Doris.7309 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doris.7309 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Doris.7309?


File Info:
name: D90DA1607BD8C7C51840.mlwpath: /opt/CAPEv2/storage/binaries/69587ff82ba982d4d16b03e182107c21ca3f3e7b9732b959ccef981aac95ca8ccrc32: DFC4CE2Cmd5: d90da1607bd8c7c51840193b13d1eb71sha1: 103a2d57f0643ff075740987e9db5ad77a8e3678sha256: 69587ff82ba982d4d16b03e182107c21ca3f3e7b9732b959ccef981aac95ca8csha512: 6e1560ee17b0d8cf8e7ace374f7e692d431b059680fbe5e6430cab398405aa1872c6deb702ed4ac6e10c0d0a6fc2cae928c8af83b65eb4d8b01bb80bc64f169fssdeep: 3072:00c0Gd9r/9ydS69WV09ThL7SfhEDvM8zhAT7SgfiQtP:01tilu7SgKQltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A5440FF37AF15EC8DEC214FF731482B7585A30390A86817965BBAEF03C9D225D1885E6sha3_384: 3d13caf6574f6a4fa710ee07dec516199776814b843493221e43db57ef1ba1b890b78c37d47ad568cc0e402cb06217adep_bytes: 6800124000e8eeffffff000040000000timestamp: 2003-08-10 03:29:26
Version Info:
Translation: 0x0409 0x04b0ProductName: eRmvHa1FileVersion: 7.86ProductVersion: 7.86InternalName: eRmvH1OriginalFilename: eRmvH1.exe

Doris.7309 also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.VBNA.li7E
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doris.7309
FireEye	Generic.mg.d90da1607bd8c7c5
Skyhigh	BehavesLike.Win32.VBObfus.dm
McAfee	Downloader-CJX.gen.au
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Worm.WBNA.Win32.876639
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	P2PWorm ( 001ce8dd1 )
Alibaba	Worm:Win32/vobfus.1030
K7GW	P2PWorm ( 001ce8dd1 )
Cybereason	malicious.7f0643
Arcabit	Trojan.Doris.D1C8D
BitDefenderTheta	AI:Packer.DF21DAD91F
VirIT	Worm.Win32.VBNA.B
Symantec	W32.Changeup!gen20
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/AutoRun.VB.WR
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.VB-1322
Kaspersky	Worm.Win32.WBNA.ipa
BitDefender	Gen:Variant.Doris.7309
NANO-Antivirus	Trojan.Win32.VB.coonjh
Avast	Win32:AutoRun-BSB [Wrm]
Tencent	Worm.Win32.Wbna.wa
Emsisoft	Gen:Variant.Doris.7309 (B)
Baidu	Win32.Worm.Autorun.am
F-Secure	Worm.WORM/CodeT.A
DrWeb	Win32.HLLW.Autoruner.35286
VIPRE	Gen:Variant.Doris.7309
TrendMicro	WORM_VOBFUS.SMIB
Trapmine	malicious.high.ml.score
Sophos	Mal/SillyFDC-D
SentinelOne	Static AI – Malicious PE
Varist	W32/S-c83aef09!Eldorado
Avira	WORM/CodeT.A
Antiy-AVL	Worm/Win32.WBNA.gen
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.VB.ww@2ajsup
Microsoft	Worm:Win32/Vobfus!pz
ZoneAlarm	Worm.Win32.WBNA.ipa
GData	Gen:Variant.Doris.7309
Google	Detected
AhnLab-V3	Worm/Win32.VBNA.R50288
Acronis	suspicious
VBA32	SScope.Trojan.VBRA.8804
ALYac	Gen:Variant.Doris.7309
MAX	malware (ai score=85)
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	WORM_VOBFUS.SMIB
Rising	Worm.Autorun!1.99ED (CLASSIC)
Yandex	Trojan.GenAsa!erL4VW5KLKg
Ikarus	Worm.Win32.Vobfus
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/AutoRun.XM!worm
AVG	Win32:AutoRun-BSB [Wrm]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)