Categories: Crack

KernelDrUtil.Hacktool.Utility.DDS removal guide

The KernelDrUtil.Hacktool.Utility.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What KernelDrUtil.Hacktool.Utility.DDS virus can do?

Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Deletes executed files from disk
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine KernelDrUtil.Hacktool.Utility.DDS?


File Info:
name: 5B33E484D97328EDAA01.mlwpath: /opt/CAPEv2/storage/binaries/c7ebf0b975802641b9a61f732e48dbdb8e66db446c05d12af02bf7c2aed7762dcrc32: A7DAC84Dmd5: 5b33e484d97328edaa012bfc3a680609sha1: 99dbc91adf83783e65b10b0c6f6a51714322f861sha256: c7ebf0b975802641b9a61f732e48dbdb8e66db446c05d12af02bf7c2aed7762dsha512: 6b779be4ed5b9dc5f4e6e68c30b6c33f356cd16f3a1caab9ebdb3f75645d7dd650ee8e39af3a6a9364c36be8c21821bf2980ec20aebf8cdab40a4681ec1c82d6ssdeep: 12288:DZ6grCrkcHcmZB3y0W71oTY+PZE9O2bJIC0fDNN:DTrCrBZB3y0WZf+O93l0fZtype: PE32+ executable (console) x86-64, for MS Windowstlsh: T123C4AE16B3A524F9E877813CC8524506E772BC260765DBAF1390676A2F336D0AD3FB21sha3_384: e1f752835d13b0425907405d9ddf4975da88e17309d3051638c39db005455bbfda769588ed7a8522b5d8a7bf869caf09ep_bytes: 4883ec28e8e70700004883c428e972fetimestamp: 2023-01-29 18:51:18
Version Info:
0: [No Data]

KernelDrUtil.Hacktool.Utility.DDS also known as:

Lionic	Trojan.Win64.Injects.tsbs
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Application.Lazy.138240
McAfee	Artemis!5B33E484D973
Malwarebytes	KernelDrUtil.Hacktool.Utility.DDS
VIPRE	Gen:Variant.Application.Lazy.138240
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0057aacd1 )
Alibaba	TrojanDropper:Win64/Genric.6cd91610
K7GW	Trojan ( 0057aacd1 )
Cyren	W64/KernelDrUtil.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win64/TrojanDropper.Agent.DO
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Agent.xatkjv
BitDefender	Gen:Variant.Application.Lazy.138240
NANO-Antivirus	Trojan.Win64.Drop.junblf
Avast	Win64:DropperX-gen [Drp]
Tencent	HackTool.Win64.KernelDrUtil.16000463
Emsisoft	Gen:Variant.Application.Lazy.138240 (B)
DrWeb	Trojan.MulDrop21.34663
McAfee-GW-Edition	BehavesLike.Win64.Dropper.hh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.5b33e484d97328ed
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Application.Lazy.138240
Jiangmin	Trojan.Agent.ejvo
Google	Detected
Avira	TR/Drop.Agent.ivkve
MAX	malware (ai score=74)
Antiy-AVL	GrayWare/Win32.Wacapew
Arcabit	Trojan.Application.Lazy.D21C00
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R445388
ALYac	Gen:Variant.Application.Lazy.138240
TrendMicro-HouseCall	TROJ_GEN.R002H0CAT23
Rising	Dropper.Agent!8.2F (CLOUD)
Ikarus	Trojan-Dropper.Win64.Agent
MaxSecure	Trojan.Malware.198937900.susgen
Fortinet	W64/Agent.DO!tr
AVG	Win64:DropperX-gen [Drp]