BadJoke.RiskWare.MSIL.DDS malicious file

The BadJoke.RiskWare.MSIL.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BadJoke.RiskWare.MSIL.DDS virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine BadJoke.RiskWare.MSIL.DDS?


File Info:
name: 1D7304B41B7518EDD621.mlw
path: /opt/CAPEv2/storage/binaries/a112fb4332e0e3650dc3ca4c7867faad6a34f59cc5438041fb38cbbcf679f3fb
crc32: 8EBFA3DA
md5: 1d7304b41b7518edd621d4ca1365a3e1
sha1: 5bcbfd8ad905b57a19517e46096b9bf68ea49ddf
sha256: a112fb4332e0e3650dc3ca4c7867faad6a34f59cc5438041fb38cbbcf679f3fb
sha512: 987223553ab0eb1650d912aaf3d53f5e5930ba324e9a6c93a078acfaaba849b73b77648be947b275ea9f20854303882d0c13ea35418c734bc52499929a8fd1c0
ssdeep: 98304:XyDt6K4MJVnjOobt/JN1LA5elHc+S4fRp5Ud:XyDtK8bbxn+IHcBEV4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D30633D17C9FFDA5D72E27780884D2906B6F3B406259F2EF52944DA378B58C3AF02942
sha3_384: bf169b621c85111dfc8a6cecfae1ef82def58f8a71050224e5134b5c779283c55eb5f174c2e3c9980f8b3bfaee09bd55
ep_bytes: 
timestamp: 2016-09-10 17:32:23

Version Info:
0: [No Data]

BadJoke.RiskWare.MSIL.DDS also known as:

Malwarebytes	BadJoke.RiskWare.MSIL.DDS
ESET-NOD32	a variant of MSIL/BadJoke.OD
APEX	Malicious
ClamAV	Win.Packed.Badjoke-9775832-0
DrWeb	Joke.Blink.4
Zillya	Tool.OD.Win32.1
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Trapmine	suspicious.low.ml.score
Ikarus	Trojan.MSIL.BadJoke
Jiangmin	Trojan.Hesv.bga
Google	Detected
Antiy-AVL	Trojan/Win32.BTSGeneric
Xcitium	Heur.Corrupt.PE@1z141z3
Cynet	Malicious (score: 100)
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/BadJoke.OD!tr

How to remove BadJoke.RiskWare.MSIL.DDS?

BadJoke.RiskWare.MSIL.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X