Worm

Klez.Worm.FileInfector.DDS removal tips

Malware Removal

The Klez.Worm.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Klez.Worm.FileInfector.DDS virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Klez.Worm.FileInfector.DDS?


File Info:

name: FC2A4499F2E0F038F084.mlw
path: /opt/CAPEv2/storage/binaries/4c92820056b998a9ed6882dde4d09101d3afe642fb2799aba7d7bea090eae9cb
crc32: 7BB7EFDD
md5: fc2a4499f2e0f038f0849e2acfef9b88
sha1: 885afef9c47c95b45d43995a939cb5e305df4034
sha256: 4c92820056b998a9ed6882dde4d09101d3afe642fb2799aba7d7bea090eae9cb
sha512: af1afaa77ca986fb709020861aba72bb64e3a79a2d1aa60e24d66096cf2ab4e8f94258d47a930e28aeffc24f7a07be4025105a0b01c6a7ece860d3d6720e8c2f
ssdeep: 768:+G8QAWLF1kxzPJvTRfT04ClTOPkvkvejKFrtnP/s2DBno4nff8ZK6KcgMuIu:VCWLF1kxzLL04Cl8HrtzhokfPRIu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C9838D23B9D08433C4D6CE70516A5B254AFED832075AD683E73DCA5A7F70AC0E93964B
sha3_384: a5688b07c908814dbae9e3d9ec809b24a3d68a984fe891da5b38da2e9bf77db5bc82aedb29d47d52b06b5dde4c776e12
ep_bytes: 558bec6aff6838d240006874a8400064
timestamp: 2002-01-18 06:38:22

Version Info:

0: [No Data]

Klez.Worm.FileInfector.DDS also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanWin32.Klez.G@mm
FireEyeGeneric.mg.fc2a4499f2e0f038
CAT-QuickHealW32.Klez.H
SkyhighBehavesLike.Win32.Klez.mm
McAfeeW32/Klez.f@MM
MalwarebytesKlez.Worm.FileInfector.DDS
VIPREWin32.Klez.G@mm
SangforSuspicious.Win32.Save.ins
K7AntiVirusEmailWorm ( 000805561 )
K7GWEmailWorm ( 000805561 )
Cybereasonmalicious.9f2e0f
BaiduWin32.Worm.Klez.a
VirITWorm.Win32.Klez.G
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Klez.H
APEXMalicious
TrendMicro-HouseCallWORM_KLEZ.GEN
AvastWin32:Klez-E [Wrm]
ClamAVWin.Worm.Klez-2
KasperskyEmail-Worm.Win32.Klez.g
BitDefenderWin32.Klez.G@mm
NANO-AntivirusTrojan.Win32.Klez.fwai
SUPERAntiSpywareTrojan.Agent/Gen-Klez
TencentWorm.Win32.Kez.aaa
SophosW32/Klez-G
GoogleDetected
F-SecureWorm.WORM/Klez.E
DrWebWin32.HLLM.Klez.2
ZillyaWorm.Klez.Win32.4
TrendMicroWORM_KLEZ.GEN
Trapminemalicious.high.ml.score
EmsisoftWin32.Klez.G@mm (B)
SentinelOneStatic AI – Malicious PE
JiangminI-Worm/Klez.g
WebrootW32.Klez.Gen
VaristW32/Klez.G@mm
AviraWORM/Klez.E
MAXmalware (ai score=80)
Antiy-AVLWorm[Email]/Win32.Klez
Kingsoftmalware.kb.a.1000
MicrosoftWorm:Win32/Klez.G@mm
XcitiumWorm.Win32.Klez.H@mf8
ArcabitWin32.Klez.EAD1A6
ViRobotI-Worm.Win32.Klez-gen
ZoneAlarmEmail-Worm.Win32.Klez.g
GDataWin32.Trojan.PSE.11SQ9WV
CynetMalicious (score: 100)
AhnLab-V3Win32/Klez.worm.G
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36802.fqY@a0VK79l
ALYacWin32.Klez.G@mm
VBA32BScope.Trojan.Meredrop
Cylanceunsafe
PandaW32/Klez.G
ZonerWorm.Win32.Klez.24289
RisingWorm.Klez!1.A1CB (CLASSIC)
YandexI-Worm.Klez!NQOcADqU928
IkarusEmail-Worm.Win32.Klez.G
MaxSecureWorm.W32.Klez.h
FortinetW32/Klez.fam@mm
AVGWin32:Klez-E [Wrm]
DeepInstinctMALICIOUS
alibabacloudWorm:Win/Klez.90cc1732

How to remove Klez.Worm.FileInfector.DDS?

Klez.Worm.FileInfector.DDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment