About “Trojan:Win32/Doina!pz” infection

The Trojan:Win32/Doina!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Doina!pz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Doina!pz?

File Info:
name: 78C2DCD937DD90E4FF4C.mlw
path: /opt/CAPEv2/storage/binaries/c086bffeb42eb427f0483a770d5ac81d0a318152a1d13ae9093fd751a2390c2e
crc32: 7D59C60B
md5: 78c2dcd937dd90e4ff4c0f5fec09a44e
sha1: 2234ab4657ed0db3285cb9cb3e35ae736b7d8ef4
sha256: c086bffeb42eb427f0483a770d5ac81d0a318152a1d13ae9093fd751a2390c2e
sha512: 0b9387c9b42c826915db0c28264e09f8f85d5c6578bd0bb1d8c4fc7dd2f1becd0c4e2644214a9143eddf178537255e954c9888f690c1eeac2008fa9a77fa36fd
ssdeep: 49152:GzhqDI4LZujDTR9/hUspUQdAgTFCyaHcDtwTrfwmQqjJLEdReY52ECy2nPMRxhZA:KvnjDJXpXAgxPaHe+QqjJtlnPSK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T170E59F227A0BC071E9CE11B065796FF7C5ACAA6E4B3104C766D42F7969311D33A31E2B
sha3_384: 2dcd55dca8b2066abddb9d945364f3e63a58e321c060bfa75be6e5ddf5c45c743e88fac0bab4ffe12be47c2033d6792f
ep_bytes: 558bec837d0c017505e82e0b0000ff75
timestamp: 2022-08-17 06:19:09

Version Info:
CompanyName: Adobe Systems Incorporated
FileDescription: LogSession
FileVersion: 8.8.0.5
InternalName: LogSession
LegalCopyright: Copyright © 2022 Adobe. All rights reserved.
OriginalFilename: LogSession.dll
PrivateBuild: 8.8.0.5
ProductName: LogSession
ProductVersion: 8.8.0.5
Translation: 0x0409 0x04b0

Trojan:Win32/Doina!pz also known as:

How to remove Trojan:Win32/Doina!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.