About “Doina.8005” infection

The Doina.8005 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.8005 virus can do?

How to determine Doina.8005?


File Info:
crc32: 36F30D71
md5: eb774260dabefbfae0b31e03cba7cbc9
name: EB774260DABEFBFAE0B31E03CBA7CBC9.mlw
sha1: 01625f553efa26d3f5681c9c538850cf8b55fe62
sha256: 9029b582d145f7b6aafb0db9700e4d727dbad946eb178fb8d3b3aabbcd0eb99e
sha512: e26dcb27eda80b096774321697015fecbdaa567614b63089a3c836b7e3b4e4233567956256f2c9c1db3b33c00125b0ba3fa7b86a34d2cac9c050cd616bd7912e
ssdeep: 24576:Zpj8acRFLuhHKvH1jy2/3XyHn8Dk0yvUIRfbyXZef1h695dnqsDlUkTQytxnwGzx:Hj8acRFihHKvpy2i8ivv24f1h6XJqsDv
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Alexander Roshal 1993-2021
InternalName: Command line RAR
FileVersion: 6.2.0
CompanyName: Alexander Roshal
ProductName: WinRAR
ProductVersion: 6.2.0
FileDescription: Command line RAR
Translation: 0x0409 0x04e4

Doina.8005 also known as:

DrWeb	Trojan.PWS.StealerNET.76
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Doina.8005
Cybereason	malicious.0dabef
Cyren	W32/CoinMiner.FA.gen!Eldorado
ESET-NOD32	multiple detections
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	IL:Trojan.MSILZilla.5712
NANO-Antivirus	Trojan.Win32.Ulise.hbmmyj
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.sm0@a0so7um
McAfee-GW-Edition	BehavesLike.Win64.Generic.tc
FireEye	IL:Trojan.MSILZilla.5712
Emsisoft	IL:Trojan.MSILZilla.5712 (B)
Avira	HEUR/AGEN.1141546
Microsoft	PWS:MSIL/Stealgen.GA!MTB
Arcabit	IL:Trojan.MSILZilla.D1650
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	MSIL.Trojan.PSE.10YV3R4
MAX	malware (ai score=88)
Rising	Malware.FakeBMP/ICON!1.6AB5 (CLASSIC)
Yandex	Trojan.PWS.Agent!pxODh+S78Ao
Ikarus	Trojan.MSIL.PSW
Fortinet	MSIL/Agent.RML!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove Doina.8005?

Doina.8005 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X