What is “Trojan:Win64/Donipye.STZ”?

The Trojan:Win64/Donipye.STZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win64/Donipye.STZ virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Trojan:Win64/Donipye.STZ?


File Info:
crc32: 4420642B
md5: fbca941295ae7909dfefc30b27b606e0
name: FBCA941295AE7909DFEFC30B27B606E0.mlw
sha1: 84cf1c44f1be6c559ca3d1d2a9792caf023f8ba8
sha256: 6dc842d09013f8131a5913646b2e37964c92789fdaf1f7b5fb36c1adad7ba4b1
sha512: 727ec7fb0127a31468441cc25c43a61c761d715f9e6090fd6dd23c26cc5c46d26e27158a43b58cfad440d4887d6744c5d1b3776913356a8165d74f875d676ba7
ssdeep: 1536:xQfI1PoXL5qd51GWGZhVGRxz81H59QmVo5L:xQfI1PsI8WgkxG3c
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright (C) Helper 2020
InternalName: Helper
FileVersion: 1.3.6.1
CompanyName: Helper
ProductName: Helper
ProductVersion: 1.3.6.7
FileDescription: Helper
OriginalFilename: Helper
Translation: 0x0809 0x04b0

Trojan:Win64/Donipye.STZ also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.Rat.335
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.391265
Cyren	W64/Bulz.AS.gen!Eldorado
ESET-NOD32	a variant of Win64/RA-based.C
APEX	Malicious
Avast	Win64:TrojanX-gen [Trj]
ClamAV	Win.Malware.Trojanx-9841179-0
Kaspersky	HEUR:Trojan.Win32.Agent.vho
BitDefender	Gen:Variant.Bulz.391265
MicroWorld-eScan	Gen:Variant.Bulz.391265
Tencent	Win32.Trojan.Agent.Egyc
Ad-Aware	Gen:Variant.Bulz.391265
FireEye	Generic.mg.fbca941295ae7909
Emsisoft	Gen:Variant.Bulz.391265 (B)
Jiangmin	Trojan.Agent.dfyu
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1108462
Antiy-AVL	Trojan/Generic.ASMalwS.3193150
Microsoft	Trojan:Win64/Donipye.STZ
Gridinsoft	Trojan.Win64.Agent.sd!n
Arcabit	Trojan.Bulz.D5F861
GData	Win64.Trojan.BackdoorTrmnl.A
AhnLab-V3	Malware/Win64.Generic.C4347737
MAX	malware (ai score=86)
Malwarebytes	Backdoor.Agent
Ikarus	Trojan.Win64.Ra
Fortinet	W64/RABased.C!tr
AVG	Win64:TrojanX-gen [Trj]

How to remove Trojan:Win64/Donipye.STZ?

Trojan:Win64/Donipye.STZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X