Doina.8580 (file analysis)

The Doina.8580 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Doina.8580 virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Finnish
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Doina.8580?


File Info:
crc32: 032F85AA
md5: 48e5d48b185c125eed30ca0b57f8621c
name: 48E5D48B185C125EED30CA0B57F8621C.mlw
sha1: edf3e5e1520cdcd260a3e111273faf4e6253ac2e
sha256: 763ed6695c6692bd857d4f712036c7d4fd8c52b20e9de8693760a99cf73329d4
sha512: f0a3c56c0b3be47c571dcb1e7228fd1afb4297f41c0988d0781691fa67996f36e81569575391f4ba6d2f3763358d146c0a17c2cffa7b1e126ef5c89c9521676a
ssdeep: 49152:LC1oz15m7hPJF4IHN+X3RGILeh/rZK24HiI8qJ+KE+dEnnPv/0xC2Dt:Jz15m7h0CNgRHLehAP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright by TypingMaster Finland Inc.
InternalName: 
FileVersion: 6.2.0.393
CompanyName: TypingMaster Inc
LegalTrademarks: 
Comments: 
ProductName: TypingMaster 2002
ProductVersion: 6.2
FileDescription: TypingMaster Tutor
OriginalFilename: 
Translation: 0x0409 0x04e4

Doina.8580 also known as:

DrWeb	Win32.WowSub.4
CAT-QuickHeal	TrojanDropper.Jadtre.B7
ALYac	Gen:Variant.Doina.8580
Cylance	Unsafe
K7GW	P2PWorm ( 004c69cd1 )
Cybereason	malicious.b185c1
Baidu	Win32.Virus.Wapomi.a
Cyren	W32/Risk.MODP-1101
Symantec	W32.Fujacks.CE!inf
ESET-NOD32	Win32/AutoRun.AntiAV.T
APEX	Malicious
Avast	Win32:AutoRun-BFB [Trj]
ClamAV	Win.Worm.Allaple-221772
Kaspersky	Trojan-Dropper.Win32.Bototer.bff
BitDefender	Gen:Variant.Doina.8580
MicroWorld-eScan	Gen:Variant.Doina.8580
Tencent	Trojan.Win32.Downloader.aav
Ad-Aware	Gen:Variant.Doina.8580
Sophos	Mal/Jadtre-C
BitDefenderTheta	Gen:NN.ZexaF.34294.pCW@ayk7XDhb
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	PE_DOWN.A-O
McAfee-GW-Edition	W32/Fujacks.cm
FireEye	Generic.mg.48e5d48b185c125e
Emsisoft	Gen:Variant.Doina.8580 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Heur:TrojanDownloader.Agent
Avira	TR/Agent.fyee.8
eGambit	Trojan.Generic
Kingsoft	Heur.SSC.1960518.1216.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Doina.8580 (2x)
McAfee	Artemis!48E5D48B185C
MAX	malware (ai score=89)
VBA32	BScope.Trojan.SvcHorse.01643
Malwarebytes	Malware.AI.2319565596
TrendMicro-HouseCall	PE_DOWN.A-O
Yandex	Trojan.GenAsa!Ju64OpijAdY
Ikarus	Rootkit.Win32.Agent
MaxSecure	Virus.W32.Bototer.A
Fortinet	W32/Wapomi.AO
AVG	Win32:AutoRun-BFB [Trj]

How to remove Doina.8580?

Doina.8580 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X