Malware

Doina.8081 information

Malware Removal

The Doina.8081 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Doina.8081 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • CAPE detected the SystemBC malware family

How to determine Doina.8081?


File Info:

name: 44B5952FF0648497528F.mlw
path: /opt/CAPEv2/storage/binaries/fdf9dd5f31a00d1a70eae6169ff7df592c4dca0303f37001b6a2125c1ad4b9be
crc32: 4F944DA2
md5: 44b5952ff0648497528f51df8347d997
sha1: 6f2f82abc2d246c82405816449df6b0139e6552f
sha256: fdf9dd5f31a00d1a70eae6169ff7df592c4dca0303f37001b6a2125c1ad4b9be
sha512: a961f56ffeae0c87973ffda0c78f52b9c4909e58013ae753e2f01882577e80e0afc1ddbb2c678b66631be436752fb2449867526f8955b0eb18ded4e52816c50d
ssdeep: 384:ZzBTaZ0/el6ylDLy8J1UBP+cUgC5IwuGw9bKrUN:/w6yw8JyBP+AC51uGw9+QN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14B52099735219EA6C016C6B53E5FA720C4BE607525399439EFF00F147B3EAA3DB1221E
sha3_384: 0a7246a46b5ee7a27289cb54d6b24a2f19b4094e4738a3cb7c3a885c3337f1442e86fc453158687eca11669c2a12e5a6
ep_bytes: 6a00e8ff1f0000a33b524000e8d11f00
timestamp: 2021-06-06 06:49:52

Version Info:

0: [No Data]

Doina.8081 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Convagent.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.44b5952ff0648497
McAfeeGenericRXAA-FA!44B5952FF064
CylanceUnsafe
SangforBackdoor.Win32.Coroxy.G
K7AntiVirusTrojan ( 00578fc91 )
AlibabaBackdoor:Win32/Coroxy.25acea65
K7GWTrojan ( 00578fc91 )
Cybereasonmalicious.ff0648
CyrenW32/Threat-HLLSI-based!Maximus
SymantecBackdoor.SystemBC
ESET-NOD32a variant of Win32/Coroxy.D
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Doina-9878360-0
KasperskyTrojan-Proxy.Win32.Sybici.rl
BitDefenderGen:Variant.Doina.8081
NANO-AntivirusTrojan.Win32.Sybici.iwrxbw
MicroWorld-eScanGen:Variant.Doina.8081
AvastWin32:TrojanX-gen [Trj]
TencentMalware.Win32.Gencirc.11c63f9e
Ad-AwareGen:Variant.Doina.8081
EmsisoftTrojan.Coroxy (A)
DrWebTrojan.Siggen14.2823
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojan.Win32.COROXY.SMYXBC3A
McAfee-GW-EditionBehavesLike.Win32.Backdoor.lm
SophosMal/Generic-S + Troj/Coroxy-A
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Doina.8081
JiangminTrojan.Multi.oi
eGambitUnsafe.AI_Score_99%
AviraHEUR/AGEN.1207314
MAXmalware (ai score=80)
Antiy-AVLTrojan/Generic.ASMalwS.337B2B6
GridinsoftRansom.Win32.Wacatac.sa
ZoneAlarmTrojan-Proxy.Win32.Sybici.rl
MicrosoftBackdoor:Win32/Coroxy.G!MTB
AhnLab-V3Trojan/Win.SystemBC.R366856
ALYacGen:Variant.Doina.8081
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Coroxy
TrendMicro-HouseCallTrojan.Win32.COROXY.SMYXBC3A
RisingBackdoor.SystemBC!1.D22F (CLOUD)
IkarusTrojan.Win32.Coroxy
FortinetW32/Coroxy.D!tr
AVGWin32:TrojanX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Doina.8081?

Doina.8081 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment