Worm

Klez.Worm.FileInfector.DDS removal

Malware Removal

The Klez.Worm.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Klez.Worm.FileInfector.DDS virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Klez.Worm.FileInfector.DDS?


File Info:

name: C9FF1D56FE9D605855A5.mlw
path: /opt/CAPEv2/storage/binaries/65d2f6fbd6abcf8fdae32be5b0b9bfa730b1512a31c90d15c5d80384853a25b9
crc32: 64511DE0
md5: c9ff1d56fe9d605855a5e8a47e1a21c6
sha1: 0d24612054b55423dd579359da1e8fc7cc184dfb
sha256: 65d2f6fbd6abcf8fdae32be5b0b9bfa730b1512a31c90d15c5d80384853a25b9
sha512: e0fc7b9d520c7d34fbca083a485710cdfeee0830b1b4411aef47f89a7dba3b3aca1e313dcf0268bdbe371812c74e099d1655c8305dc2c92c63a20dcdbcea2d07
ssdeep: 1536:zaWLF1kxTnUI4CFPtv6iSJnaGlbVxhoAyBrwGJIu:zaWExTnUTCFPtvanaGlbVxhovB8/u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8738D33BD904073C496827011AA9B254EBEE9330756E683FB1D9A5B7F606D1ED3930B
sha3_384: 2a1b2e7284eab1ef2a99def88d7dcab3485d393f4b944797d70a3ce8eb6ceba2a582d6d216effe6850187484648364ec
ep_bytes: 558bec6aff6838d240006874a8400064
timestamp: 2002-01-18 01:22:13

Version Info:

0: [No Data]

Klez.Worm.FileInfector.DDS also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanDropped:Win32.Elkern.B
ClamAVWin.Worm.Klez-2
FireEyeGeneric.mg.c9ff1d56fe9d6058
CAT-QuickHealW32.Klez.H
SkyhighBehavesLike.Win32.Klez.lh
McAfeeW32/Klez.f@MM
MalwarebytesKlez.Worm.FileInfector.DDS
VIPREDropped:Win32.Elkern.B
SangforSuspicious.Win32.Save.ins
K7AntiVirusEmailWorm ( 000805561 )
K7GWEmailWorm ( 000805561 )
Cybereasonmalicious.054b55
ArcabitWin32.Elkern.B
BitDefenderThetaGen:NN.ZexaF.36744.eqX@aa5cMjd
VirITWorm.Win32.Klez.J
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Klez
APEXMalicious
CynetMalicious (score: 100)
KasperskyEmail-Worm.Win32.Klez.j
BitDefenderDropped:Win32.Elkern.B
NANO-AntivirusTrojan.Win32.Klez.fwaj
SUPERAntiSpywareWorm.Kelz
AvastWin32:Klez-E [Wrm]
EmsisoftDropped:Win32.Elkern.B (B)
BaiduWin32.Worm.Klez.a
F-SecureWorm.WORM/Klez.E
DrWebWin32.HLLM.Klez.6
ZillyaWorm.Klez.Win32.4
TrendMicroWORM_KLEZ.GEN
Trapminemalicious.high.ml.score
SophosW32/Klez-Fam
SentinelOneStatic AI – Malicious PE
JiangminI-Worm/Klez.h
WebrootW32.Klez.Gen
GoogleDetected
AviraWORM/Klez.E
MAXmalware (ai score=87)
Antiy-AVLWorm[Email]/Win32.Klez
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Trojan.Agent.Gen@67u02
MicrosoftWorm:Win32/Klez.G@mm
ViRobotI-Worm.Win32.Klez-gen
ZoneAlarmEmail-Worm.Win32.Klez.j
GDataWin32.Trojan.PSE.11SQ9WV
VaristW32/Klez.J@mm
AhnLab-V3Win32/Klez.worm.I
Acronissuspicious
VBA32BScope.Trojan.Meredrop
ALYacDropped:Win32.Elkern.B
Cylanceunsafe
PandaW32/Klez.H
ZonerWorm.Win32.Klez.27775
TrendMicro-HouseCallWORM_KLEZ.GEN
RisingWorm.Klez!1.A1CB (CLASSIC)
YandexI-Worm.Klez!+ocVMVYxTzc
IkarusEmail-Worm.Win32.Klez.J
FortinetW32/Klez.fam@mm
AVGWin32:Klez-E [Wrm]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Klez.Worm.FileInfector.DDS?

Klez.Worm.FileInfector.DDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment