Mabezat.Worm.FileInfector.DDS information

The Mabezat.Worm.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mabezat.Worm.FileInfector.DDS virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Mabezat.Worm.FileInfector.DDS?


File Info:
name: 2B899BC00933489E687C.mlw
path: /opt/CAPEv2/storage/binaries/40fafed5224af3501335fe50e7a5b175dbd567da21fc6a1a4313ac9c55bb09c5
crc32: 5970CA66
md5: 2b899bc00933489e687c819a3fb32f2c
sha1: 7c3924d9c8bd6916a125497f12cde2572b798119
sha256: 40fafed5224af3501335fe50e7a5b175dbd567da21fc6a1a4313ac9c55bb09c5
sha512: 76db8dccba888c5c9d27cb6be7424f50852ee3af2881540d29eabb71b9b25edac8934efe66a681337b5ec861eff78ee7cfca71d38675f6ac67902eb496c412f3
ssdeep: 1536:vDtR+Eo5utW314ZVApz94OnJKFQEphBvD8ECte:rtkEoAWF4ZCD4OnYQeD84
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A8A319913A5E4377E206707019183FE5BAE7DC36096F045FF38C7A1A29399C68E74297
sha3_384: 47c6418db61808c7ff66b2cf02eeb67943398f46af8042e4d27ebee9fbb69535b236c9331cc23158b56481754615e98a
ep_bytes: 00000000000000000000000000000000
timestamp: 2007-10-29 06:17:05

Version Info:
0: [No Data]

Mabezat.Worm.FileInfector.DDS also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.98927
ClamAV	Win.Worm.Mabezat-9873100-0
FireEye	Generic.mg.2b899bc00933489e
ALYac	Trojan.GenericKDZ.98927
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.9c8bd6
VirIT	Trojan.Win32.Generic.NV
Cyren	W32/Mabezat.dam!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.98927
Avast	Win32:AutoRun-AQM [Wrm]
Tencent	Malware.Win32.Gencirc.10be9b16
Emsisoft	Trojan.GenericKDZ.98927 (B)
F-Secure	Worm.WORM/Mabezat.b
VIPRE	Trojan.GenericKDZ.98927
TrendMicro	Mal_Otorun7
McAfee-GW-Edition	BehavesLike.Win32.Generic.nm
Sophos	Mal/EncPk-RV
GData	Win32.Trojan.PSE.1IDWSVD
Jiangmin	Trojan/Genome.evc
Avira	WORM/Mabezat.b
Antiy-AVL	Worm/Win32.AutoRun.inf
Xcitium	Worm.Win32.Mabezat.b0@1q1u5e
Arcabit	Trojan.Generic.D1826F
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
McAfee	Artemis!2B899BC00933
MAX	malware (ai score=83)
Malwarebytes	Mabezat.Worm.FileInfector.DDS
TrendMicro-HouseCall	Mal_Otorun7
Rising	Worm.Mabezat!1.995D (CLASSIC)
Ikarus	Worm.Win32.Mabezat
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Mabezat.C7C5!dam
AVG	Win32:AutoRun-AQM [Wrm]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Mabezat.Worm.FileInfector.DDS?

Mabezat.Worm.FileInfector.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X