Trojan

AdClicker.Trojan.Clicker.DDS malicious file

Malware Removal

The AdClicker.Trojan.Clicker.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdClicker.Trojan.Clicker.DDS virus can do?

  • Sample contains Overlay data
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Attempts to create or modify a Browser Helper Object

How to determine AdClicker.Trojan.Clicker.DDS?


File Info:

name: 59D0CA3216D8379B0B85.mlw
path: /opt/CAPEv2/storage/binaries/8da264a5c778b8a94bc8440719453a5b884efd04e22f79bd94bce38b95a09d4c
crc32: 0ACE983A
md5: 59d0ca3216d8379b0b85bf4a802f6cfb
sha1: 234acd25a388babc98ad0bd2fe4f426b9fe0e41e
sha256: 8da264a5c778b8a94bc8440719453a5b884efd04e22f79bd94bce38b95a09d4c
sha512: 5be4da484ee785fabdce078f479e418434294a84070c0d4cad2b95b4626d44c63fc548b558a87f64c5b8b2d73942915e81062971d77540f348bf37f953b4349f
ssdeep: 6144:f67bocez+5No0CvrpydxCHBFGk2j4r7JT65JeX8jwDVc:8bocez+XcvrsOBVc
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T13A746C33F580C033D0924B785EEAE662A47FFE946D285847B7D45E8E5B782807D16387
sha3_384: 110db2b744e796239c397a0b5ac753b01a4b6797f18fc45f7b3bdf0ab1adbfe06562099b90aed83c8854cbf9e6ac7be6
ep_bytes: eb1066623a432b2b484f4f4b90e9f8c0
timestamp: 2009-05-14 17:13:27

Version Info:

CompanyName: Microsoft Corporation
FileDescription: DirectSound
FileVersion: 5.3.2600.5512 (xpsp.080413-0845)
InternalName: DirectSound
LegalCopyright: (C) Microsoft Corporation. All rights reserved.
OriginalFilename: dsound.dll
ProductName: Microsoft(R) Windows(R) Operating System
ProductVersion: 5.3.2600.5512
Translation: 0x0804 0x04b0

AdClicker.Trojan.Clicker.DDS also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Kidney.4!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop26.45100
MicroWorld-eScanDropped:Generic.Dacic.9FCDF109.A.92886C32
FireEyeGeneric.mg.59d0ca3216d8379b
Cylanceunsafe
VIPREDropped:Generic.Dacic.9FCDF109.A.92886C32
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/Kidney.232196a0
K7GWTrojan ( 000fdb2f1 )
K7AntiVirusTrojan ( 000fdb2f1 )
BitDefenderThetaGen:NN.ZedlaF.36804.vC9@aODQ8rab
Paloaltogeneric.ml
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Agent.PIX
TrendMicro-HouseCallTROJ_GEN.R002C0RD124
AvastWin32:Malware-gen
ClamAVWin.Malware.Kidney-10019419-0
KasperskyTrojan.Win32.Kidney.cyb
BitDefenderDropped:Generic.Dacic.9FCDF109.A.92886C32
NANO-AntivirusTrojan.Win32.Kidney.diads
TencentMalware.Win32.Gencirc.10b86342
EmsisoftDropped:Generic.Dacic.9FCDF109.A.92886C32 (B)
F-SecureTrojan.TR/Dldr.Delphi.Gen
ZillyaTrojan.Agent.Win32.678690
TrendMicroTROJ_GEN.R002C0RD124
SophosMal/Kidney-A
IkarusTrojan.Win32.Kidney
JiangminTrojan.Kidney.c
GoogleDetected
AviraTR/Dldr.Delphi.Gen
VaristW32/Agent.IHQ.gen!Eldorado
Antiy-AVLTrojan/Win32.TSGeneric
KingsoftWin32.Trojan.Kidney.cyb
MicrosoftTrojan:Win32/Multiverze
XcitiumTrojWare.Win32.Wansrog.GG@77scj4
ArcabitGeneric.Dacic.9FCDF109.A.92886C32
ZoneAlarmTrojan.Win32.Kidney.cyb
GDataWin32.Trojan.PSE.1U2AM4W
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Kidney.R1920
VBA32Trojan.Kidney
ALYacDropped:Generic.Dacic.9FCDF109.A.92886C32
MalwarebytesAdClicker.Trojan.Clicker.DDS
PandaTrj/GdSda.A
RisingTrojan.Win32.FakeMS.gj (CLASSIC)
YandexTrojan.GenAsa!/aQRuwv3Yh4
MAXmalware (ai score=84)
MaxSecureTrojan.Malware.213735849.susgen
FortinetW32/Kidney.BBFH!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
alibabacloudTrojan[downloader]:Win/Agent.81c2e7b9

How to remove AdClicker.Trojan.Clicker.DDS?

AdClicker.Trojan.Clicker.DDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment