Trojan.Win64.Donut.fjr removal instruction

The Trojan.Win64.Donut.fjr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win64.Donut.fjr virus can do?

The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Anomalous binary characteristics

How to determine Trojan.Win64.Donut.fjr?


File Info:
crc32: EE6E328D
md5: 3b70dc1484d68fb33ceb9d76c8153427
name: 3B70DC1484D68FB33CEB9D76C8153427.mlw
sha1: 3825605ea1f286e49e728076a98936d9238061b7
sha256: 9372e8207757bde9269fba541390ae178db3cf1eeb81fe598427ac619bb0f209
sha512: a43590b720a68e2cdf7be8acb6254a4921541e651d14ae981e31eb79adbbc863de824a97927ae1a12c05a5e60b7e881cf2e3765e114978e17f138db96ffc963f
ssdeep: 196608:8WVScqsI9v6FlJY/QwXTo9ZOuL5h/UR8B18J5+t:djJI9vekVTih5aGB1MQ
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright x412xa9 1996-2018 VideoLAN and VLC Authors
FileVersion: 3,0,3,0
CompanyName: VideoLAN
ProductName: VLC media player
ProductVersion: 3,0,3,0
FileDescription: VLC media player
FileTitle: vlc
LegalTrademark: VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
Translation: 0x0409 0x04b0

Trojan.Win64.Donut.fjr also known as:

K7AntiVirus	Trojan ( 0058a78f1 )
Lionic	Trojan.Win64.Donut.4!c
DrWeb	Trojan.Inject4.20168
ALYac	Gen:Variant.Bulz.931113
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Bulz.931113
K7GW	Trojan ( 0058a78f1 )
Cybereason	malicious.ea1f28
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Packed.VMProtect.NM
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win64.Donut.fjr
Alibaba	Trojan:Win64/Donut.0bf51291
MicroWorld-eScan	Gen:Variant.Bulz.931113
Ad-Aware	Gen:Variant.Bulz.931113
Sophos	Mal/Generic-R + Mal/VMProtBad-A
McAfee-GW-Edition	BehavesLike.Win64.Injector.vc
FireEye	Generic.mg.3b70dc1484d68fb3
Emsisoft	Gen:Variant.Bulz.931113 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Bulz.DE3529
GData	Win32.Packed.Kryptik.H1KZ16
AhnLab-V3	Trojan/Win.Generic.C4759233
McAfee	Artemis!3B70DC1484D6
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H07KK21
Yandex	Trojan.VMProtect!d7ymd+aXtUk
Ikarus	Trojan.Win64.Vmprotect
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
Paloalto	generic.ml

How to remove Trojan.Win64.Donut.fjr?

Trojan.Win64.Donut.fjr removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X