About “Doina.66756” infection

The Doina.66756 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.66756 virus can do?

Uses Windows utilities for basic functionality
Authenticode signature is invalid
Creates known Fynloski/DarkComet mutexes

How to determine Doina.66756?


File Info:
name: 9DA1031F34865E79A5A7.mlw
path: /opt/CAPEv2/storage/binaries/2741ef72948b9be20c6361ea36f44533f403c6a1fddd41629e224c9311d777db
crc32: 9330F1D3
md5: 9da1031f34865e79a5a7b3b2f9eaffe0
sha1: 0f81d34c7f095843338268dd68f155cba7f30129
sha256: 2741ef72948b9be20c6361ea36f44533f403c6a1fddd41629e224c9311d777db
sha512: 65a536994b203b71fc63ff1eb8d8a3d1b1cce4f10860899f583e306d4d90927a03022084280f62d223828a904240e3086614715b028084b5625210e96e379489
ssdeep: 6144:3/ZsoJfraVcMu/y+28HsRyO1vfzpWZr8Dh2AOZEULRA:3/OcfraVmy+FmBfnh2PNRA
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T190348D11B9D1C472D4B2153109F8DBB65A7DFD210F20D9EBA3D81B3D8E302D19A36A6B
sha3_384: 199ebe948de1d460b891a76537e0ae5036b4c5587f05ceb297bd4685812c641f0ce0a31b181446c73f8f71619a31eaee
ep_bytes: e884040000e974feffffe9c445000083
timestamp: 2023-11-09 04:04:54

Version Info:
0: [No Data]

Doina.66756 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Doina.66756
FireEye	Generic.mg.9da1031f34865e79
Skyhigh	BehavesLike.Win32.NetLoader.dh
McAfee	RDN/Generic.hra
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.Agent.Vt0y
BitDefender	Gen:Variant.Doina.66756
Cybereason	malicious.c7f095
BitDefenderTheta	Gen:NN.ZexaF.36792.oqW@aazvkLh
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Rising	Trojan.Generic@AI.100 (RDML:Rh3HXOiFnKJEE0sxNxRoLw)
VIPRE	Gen:Variant.Doina.66756
Emsisoft	Gen:Variant.Doina.66756 (B)
Kingsoft	malware.kb.a.742
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Doina.D104C4
GData	Gen:Variant.Doina.66756
ALYac	Gen:Variant.Jaik.195318
MAX	malware (ai score=81)
DeepInstinct	MALICIOUS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09KA23
SentinelOne	Static AI – Suspicious PE
AVG	FileRepMalware [Rat]
Avast	FileRepMalware [Rat]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Doina.66756?

Doina.66756 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X