Trojan:Win32/Doina!pz removal

The Trojan:Win32/Doina!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Doina!pz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Doina!pz?

File Info:
name: 369D2C15E2DC3BE67E6A.mlw
path: /opt/CAPEv2/storage/binaries/96c4d7317518396d1e5a57e008d4ae76393dec298f07d117252c2600f49dcfc6
crc32: BA782C2D
md5: 369d2c15e2dc3be67e6a90ef43cd80c1
sha1: 200205257ca94a42276cf09e87b133f97dbb6462
sha256: 96c4d7317518396d1e5a57e008d4ae76393dec298f07d117252c2600f49dcfc6
sha512: b021dbb3311e16fe5fa44f37de4344a3e1e073e93bf3d8fd0aea9d77e49802ccaec81aa1ba47268541c7efa7519671a33bb248396ba3e75fd5afdcb704a4a0b8
ssdeep: 6144:2sOvg+QuaIqzn+xlzVyx3kwlKWzWeKU13aiHPplT3zaz0aDF1Wv9Z3oTOszJ:2sbEG+x6x0EHRK8q2T3davWv6O
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10F94CF16272ACCFEE6DE217E4BB48B8E425DAC758F7201C3B55B262849359C76E31343
sha3_384: 0ab404cf2c7dd10997844a995493243923c8709aad77be0089db762bea6582ffe89051cab7696be4347fcd78e0f2a690
ep_bytes: 558bec837d0c017505e879040000ff75
timestamp: 2022-09-29 11:02:30

Version Info:
BinType: 32
CompanyName: Adobe Systems Incorporated
FileDescription: Bravo Interface Binder Utilities
FileVersion: 4.0.1.1
InternalName: BIBUtils
LegalCopyright: Copyright 1987 Adobe Inc. All rights reserved.
OriginalFilename: BIBUtils.dll
ProductName: BIBUtils 0000/00/00-00:00:00
ProductVersion: 1.3971cff
BuildDate: 0000/00/00-00:00:00
BuildVersion: 1.3971cff
BuildType: Release CRTMTDLL
BuildID: 1
Translation: 0x0800 0x04b0

Trojan:Win32/Doina!pz also known as:

How to remove Trojan:Win32/Doina!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.