Trojan

Should I remove “Generic.Trojan.MalPack.DDS”?

Malware Removal

The Generic.Trojan.MalPack.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Trojan.MalPack.DDS virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Attempts to masquerade or mimic a legitimate process or file name
  • Attempts to modify Explorer settings to prevent file extensions from being displayed
  • Attempts to modify Explorer settings to prevent hidden files from being displayed
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Trojan.MalPack.DDS?


File Info:

name: C001DB8568D2BBEB13A1.mlw
path: /opt/CAPEv2/storage/binaries/88b270192679b548cd92a671802a533ff2cdfe7649674fef21dca5f8b4a5de87
crc32: 7AF92E1C
md5: c001db8568d2bbeb13a14fc0563d1b5e
sha1: a134ba6afe25214f0dbf9db3769dd4d32f200f0e
sha256: 88b270192679b548cd92a671802a533ff2cdfe7649674fef21dca5f8b4a5de87
sha512: f2c94ae60c8cd8e58ec6bed87c18834e5b185faef87bcb08b931833ff3651bfab65555c5c4ccdbb8bbb8d46e39624f5f8d543c02a21bacde6a692836e04468d4
ssdeep: 6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYs:v6Wq4aaE6KwyF5L0Y2D1PqLl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C16413EF72A4A902D8BC0272FA534381C0E07931AB78D77B71107A176CAF0156E67B5D
sha3_384: 265a790a987f00190a62358d0f172a2e9e4b2ba643e4da2865ef9640e7e1895bedfbac1d4b1e194565f84556f8a1a4e4
ep_bytes: 60be007047008dbe00a0f8ff57eb0b90
timestamp: 2012-01-29 21:32:28

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Generic.Trojan.MalPack.DDS also known as:

Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.Generic.8121236
ClamAVWin.Malware.Autoit-6981134-0
CAT-QuickHealTrojan.AutoIt.Pistolar.A
ALYacTrojan.Generic.8121236
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 700000111 )
K7GWTrojan ( 700000111 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduAutoIt.Worm.Agent.a
VirITTrojan.Win32.Autoit.ES
CyrenW32/AutoIt.AK.gen!Eldorado
SymantecW32.SillyFDC
ESET-NOD32Win32/Autoit.HZ
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Autoit.blz
BitDefenderTrojan.Generic.8121236
NANO-AntivirusTrojan.Script.AutoIt.dbycns
AvastAutoIt:Agent-DP [Trj]
EmsisoftTrojan.Generic.8121236 (B)
F-SecureTrojan.TR/Rogue.JH.7554630
DrWebBackDoor.IRC.Bot.3238
VIPRETrojan.Generic.8121236
McAfee-GW-EditionBehavesLike.Win32.Trojan.fc
Trapminemalicious.high.ml.score
FireEyeTrojan.Generic.8121236
SophosML/PE-A
GDataTrojan.Generic.8121236
JiangminTrojan.MSIL.Zapchast.ag
AviraTR/Rogue.JH.7554630
Antiy-AVLTrojan[Dropper]/Script.Pistolar
XcitiumTrojWare.Win32.Autoit.n@4p0xzq
ArcabitTrojan.Generic.D7BEB94
ZoneAlarmTrojan.Win32.Autoit.blz
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Win-Trojan/Autoit.305824
Acronissuspicious
McAfeeAutoit.Dropper.gen.a
MAXmalware (ai score=80)
VBA32Worm.Autoit.Rush
MalwarebytesGeneric.Trojan.MalPack.DDS
PandaTrj/Autoit.gen
RisingDropper.Pistolar/Autoit!1.A603 (CLASSIC)
IkarusTrojan.Win32.Autoit
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Autoit.HZ!worm
BitDefenderThetaAI:Packer.05DA809615
AVGAutoIt:Agent-DP [Trj]
DeepInstinctMALICIOUS

How to remove Generic.Trojan.MalPack.DDS?

Generic.Trojan.MalPack.DDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment