Categories: Virus

Hematite.Virus.FileInfector.DDS information

The Hematite.Virus.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Hematite.Virus.FileInfector.DDS virus can do?

At least one process apparently crashed during execution
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Hematite.Virus.FileInfector.DDS?


File Info:
name: BB1410C4B9F644691CB6.mlwpath: /opt/CAPEv2/storage/binaries/c686e0676d278aa7dcfdb993f9e34895f4c49202db0e9b709bd07380542faff1crc32: A6DF0D78md5: bb1410c4b9f644691cb64af00998f7c6sha1: 2844897089609cd63b19ab5b3583e819584cffaesha256: c686e0676d278aa7dcfdb993f9e34895f4c49202db0e9b709bd07380542faff1sha512: 30f73cdb02bf65bcc0435e240a0d733b7150a435f5621a0f6aaba942799b627133a9c702dca4bbe8db5b44876ca21483d58795525c6b8e2a5e62d1544e5048cbssdeep: 384:n4SO2WYzxYSiAsJ5iEsXkr880O1fjKO9RaoEHmUCWcMzWQKsOGwcpIL:2KNYDAXEDrR0O1rj2oumhMhKuItype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12892C00345B8005AF8FF01351147823842B473A59399CBEB3EDD8ABE5FA5893AD18B77sha3_384: 041162b8fa22fcaa670a81e9da8de677f0886b721b6be51fa79242e0b1d4b1e63fd671bb4fc56ce494e9dc12318ed044ep_bytes: 60be005000018dbe00c0ffff5783cdfftimestamp: 2008-04-13 18:36:53
Version Info:
CompanyName: Microsoft CorporationFileDescription: Windows Font ViewerFileVersion: 5.1.2600.5512 (xpsp.080413-2105)InternalName: fontviewLegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: FONTVIEW.EXEProductName: Microsoft® Windows® Operating SystemProductVersion: 5.1.2600.5512Translation: 0x0409 0x04b0

Hematite.Virus.FileInfector.DDS also known as:

ClamAV	Win.Virus.Hematite-6232506-0
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Win32.Hematite.A
Cybereason	malicious.4b9f64
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
NANO-Antivirus	Virus.Win32.Infector.emtrum
MicroWorld-eScan	Win32.Hematite.A
Rising	Trojan.Wacatac!8.10C01 (TFE:dGZlOgS101RFH7NyKg)
Ad-Aware	Win32.Hematite.A
McAfee-GW-Edition	BehavesLike.Win32.Virut.lc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.bb1410c4b9f64469
Emsisoft	Win32.Hematite.A (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=82)
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Win32.Hematite.A
GData	Win32.Hematite.A
AhnLab-V3	Malware/Win32.Generic.C3063256
ALYac	Win32.Hematite.A
Malwarebytes	Hematite.Virus.FileInfector.DDS
Ikarus	Trojan.Agent
Fortinet	W32/Agent.NDW
BitDefenderTheta	AI:Packer.812B76F823
AVG	Win32:Patched-AWV [Trj]
Avast	Win32:Patched-AWV [Trj]
CrowdStrike	win/malicious_confidence_70% (D)