About “Doina.66756” infection

The Doina.66756 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.66756 virus can do?

Uses Windows utilities for basic functionality
Authenticode signature is invalid
Creates known Fynloski/DarkComet mutexes

How to determine Doina.66756?


File Info:
name: BDE008BE6F7741C6C3E5.mlw
path: /opt/CAPEv2/storage/binaries/2d886cf1612ec78952cda46c14a6bfc24b993023763a63cfc5b0824c2974646b
crc32: 21F8C514
md5: bde008be6f7741c6c3e5029d0a8f894f
sha1: 4efff7f2883055d16c4f21f31b15f83cd0d3fb0b
sha256: 2d886cf1612ec78952cda46c14a6bfc24b993023763a63cfc5b0824c2974646b
sha512: 916327ffa608cdcd5ab27b9ba7ed434998f5cc47ef10603e16bc991473ad8f36ff77935e5c3d07151ae2bc9e9b8b3213abfc69d94f2ae440942fb6b8109ac3a7
ssdeep: 6144:pF7wRKlph4l+O7KQ7hBKszYBs1hjuyRpAOESz:pKRKlpKl+PLuPVz
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T147349D1074D1C873D5A2143248B5DBB64ABDB8210F21DAEBB7D41B7EDE302C19A35A7B
sha3_384: d47cf01b04655a28e71469083afdca7b93412f930e83b0c0e4513801571561d6f558c24d4bb5546f60b2eb8cb7cc4738
ep_bytes: e884040000e974feffffe9f445000083
timestamp: 2023-11-09 03:55:41

Version Info:
0: [No Data]

Doina.66756 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Doina.66756
FireEye	Generic.mg.bde008be6f7741c6
Skyhigh	BehavesLike.Win32.Generic.dh
ALYac	Gen:Variant.Jaik.195318
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Gen:Variant.Doina.66756
Sangfor	Trojan.Win32.Agent.Vo9r
BitDefender	Gen:Variant.Doina.66756
Cybereason	malicious.288305
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.KeyLogger.RHY
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	VHO:Trojan-Dropper.Win32.Convagent.gen
Alibaba	TrojanSpy:Win32/KeyLogger.57b1237c
Rising	Trojan.Generic@AI.100 (RDML:h1+utySYEcArj62NCxvN+g)
Emsisoft	Gen:Variant.Doina.66756 (B)
F-Secure	Trojan.TR/Spy.KeyLogger.vnecm
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Suspicious PE
Avira	TR/Spy.KeyLogger.vnecm
Antiy-AVL	Trojan[Spy]/Win32.KeyLogger
Kingsoft	malware.kb.a.798
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Doina.D104C4
ZoneAlarm	VHO:Trojan-Dropper.Win32.Convagent.gen
GData	Gen:Variant.Doina.66756
Google	Detected
McAfee	RDN/Generic PWS.y
MAX	malware (ai score=87)
DeepInstinct	MALICIOUS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09KA23
Ikarus	Trojan-Spy.Win32.KeyLogger
BitDefenderTheta	Gen:NN.ZexaF.36792.oqW@aiKGY9f
AVG	Win32:Dh-A [Heur]
Avast	Win32:Dh-A [Heur]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Doina.66756?

Doina.66756 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X