Categories: Virus

Expiro.Virus.FileInfector.DDS removal

The Expiro.Virus.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Expiro.Virus.FileInfector.DDS virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Arabic (Oman)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Expiro.Virus.FileInfector.DDS?


File Info:
name: 86051A1A436BB4020736.mlwpath: /opt/CAPEv2/storage/binaries/ca1d3139116510da555957a86e243d6516005fd440c2cac1bb014ea3dcad2bc2crc32: 507657F5md5: 86051a1a436bb40207361ffd77c6342dsha1: 733b07f1d6913d391af71ad70dfe436f858e9b62sha256: ca1d3139116510da555957a86e243d6516005fd440c2cac1bb014ea3dcad2bc2sha512: 14a90432452925bd2521239bc4d520b0e2d4b14a5329e7560c3d875b264bc6fe092b4e60b02bc1b0479f61f5db3d4b3aa9bddabce52c63fe10d61bfd49177c4dssdeep: 49152:KTipzT89Gc76AdznjWxlftOKeZnTNK1KdIFVMs9iBal1O:Gip0oI6Adznj+lftJ0TGKdS1type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1B37622129D3D8022E1B296B1B4D8469731A05E6DB82D7B873E93F4F91C374F062D897Bsha3_384: 1eca774071caccda478d282e17dc22b890ef3f15ea9a9f3bed03777ff89136e0bb2ad60ee4da5bd02818155501a11551ep_bytes: e8f3700000e97bfeffff558bec8b550ctimestamp: 2016-01-01 03:16:02
Version Info:
CompanyName: Microsoft CorporationFileDescription: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) SetupFileVersion: 10.0.40820.00InternalName: vstor40_x64.exeLegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: vstor40_x64.exeProductName: Microsoft Visual Studio 2010 Tools for Office Runtime (x64)ProductVersion: 10.0.40820.00Translation: 0x0409 0x04b0

Expiro.Virus.FileInfector.DDS also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.DownloadHelper.2!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.971469
FireEye	Generic.mg.86051a1a436bb402
McAfee	DLAssistant
Cylance	Unsafe
VIPRE	Gen:Variant.Graftor.971469
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005464371 )
Alibaba	AdWare:Win32/Kryptik.be243577
K7GW	Trojan ( 005464371 )
Cybereason	malicious.a436bb
Arcabit	Trojan.Graftor.DED2CD
Cyren	W32/Trojan.FLD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Kryptik.GNEP
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
BitDefender	Gen:Variant.Graftor.971469
NANO-Antivirus	Trojan.Win32.Cognac.fpzrni
Avast	FileRepMalware [Trj]
Tencent	Win32.AdWare.Downloadhelper.Jcnw
Ad-Aware	Gen:Variant.Graftor.971469
Comodo	Malware@#2nyllxqhfv1eh
DrWeb	Trojan.Cognac.9
Zillya	Trojan.Kryptik.Win32.3683243
TrendMicro	TrojanSpy.Win32.URSNIF.SMY.hp
McAfee-GW-Edition	DLAssistant
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Graftor.971469 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.DownloadHelper.jph
Avira	HEUR/AGEN.1228681
Antiy-AVL	GrayWare[AdWare]/Win32.DownloadHelper
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Graftor.971469
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.34796.@x0@aWDjlLkO
ALYac	Gen:Variant.Graftor.971469
MAX	malware (ai score=94)
VBA32	BScope.Trojan.Fuerboos
Malwarebytes	Expiro.Virus.FileInfector.DDS
TrendMicro-HouseCall	TrojanSpy.Win32.URSNIF.SMY.hp
Rising	Trojan.Kryptik!1.B5BE (CLASSIC)
Yandex	PUA.DownloadHelper!kSsTcTuPQjo
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/Kryptik.GGIJ!tr
AVG	FileRepMalware [Trj]
Panda	Trj/Genetic.gen