Chindo.Trojan.Downloader.DDS removal

The Chindo.Trojan.Downloader.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Chindo.Trojan.Downloader.DDS virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Chindo.Trojan.Downloader.DDS?


File Info:
name: A42843C8FA0B9D82E2BE.mlw
path: /opt/CAPEv2/storage/binaries/790e362c717fb8ef2e164ce02f0a2322b75e0bdc05b34df2ac941ebaa2bbe203
crc32: EFCB54A1
md5: a42843c8fa0b9d82e2be11ae2580886a
sha1: f08bfc1eaab130fb809d1f75daa4ec63f7833eca
sha256: 790e362c717fb8ef2e164ce02f0a2322b75e0bdc05b34df2ac941ebaa2bbe203
sha512: eb96f36cc27c21c17e9b78608d6d89d8b7b99e8bb19c5837b0918c5f5ea38fe00c97b7b52b0f2c14e1ae085e0bd304342355c1483c84db6c55be61419ca59910
ssdeep: 24576:1M0P8FF8I8CurS5VOjJtwF0z/5B1X+xPiRG/GgJ94F1hF9wHfHdpLPo/h:K0M8IZ6S5VOjI2z/d+xPiRG/GBHClNPw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DF553325350844A7FB820777959CBFAEF47D62E0462880C7BBB0076B47A93D62E637C5
sha3_384: 958cf4740c3ed48f658ff2e2d5f6ac263e4292e43f1cc7fbb8015df7600e636b1c799e617484891b2cadb38a55c9ac38
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-18 21:33:23

Version Info:
0: [No Data]

Chindo.Trojan.Downloader.DDS also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Trojan.Generic.33133935
FireEye	Trojan.Generic.33133935
Skyhigh	BehavesLike.Win32.Generic.tc
McAfee	GenDownloader.uz
Zillya	Downloader.Agent.Win32.281842
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.eaab13
Arcabit	Trojan.Generic.D1F9956F
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Meinhudong.C potentially unwanted
APEX	Malicious
Kaspersky	not-a-virus:UDS:AdWare.Win32.Agent.jtpw
BitDefender	Trojan.Generic.33133935
NANO-Antivirus	Riskware.Nsis.Agent.eaywwd
Emsisoft	Trojan.Generic.33133935 (B)
VIPRE	Trojan.Generic.33133935
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Agent
Antiy-AVL	GrayWare[Downloader]/Win32.Adload.gen
Microsoft	PUADlManager:Win32/Meinhudong
ZoneAlarm	not-a-virus:UDS:AdWare.Win32.Agent.jtpw
GData	NSIS.Application.Meinhudong.D
Google	Detected
VBA32	BScope.Backdoor.Androm
ALYac	Trojan.Generic.33133935
MAX	malware (ai score=86)
Malwarebytes	Chindo.Trojan.Downloader.DDS
Rising	Malware.Meinhudong!8.12E0A (CLOUD)
SentinelOne	Static AI – Suspicious PE
Fortinet	Riskware/Meinhudong
CrowdStrike	win/grayware_confidence_70% (D)

How to remove Chindo.Trojan.Downloader.DDS?

Chindo.Trojan.Downloader.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X