How to remove “SpyVoltar.Spyware.Stealer.DDS”?

The SpyVoltar.Spyware.Stealer.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What SpyVoltar.Spyware.Stealer.DDS virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine SpyVoltar.Spyware.Stealer.DDS?


File Info:
name: 665CC7D808025A9B6AFB.mlw
path: /opt/CAPEv2/storage/binaries/395a462edcf3dcd492f517b94d2f6d679f181229de7297af33060a277e7f31dd
crc32: 59EEE044
md5: 665cc7d808025a9b6afb54424976faea
sha1: 4bb445c1d2e946c2dc16591d487fa8face42d020
sha256: 395a462edcf3dcd492f517b94d2f6d679f181229de7297af33060a277e7f31dd
sha512: 24e87f9dc225ed3bd732182e1ece001069e02fb4c51608971c19f0ba30ee2c83d19ec8b9c4023f768a7437a2e335e947a6ed191462213434ce1b7b6459315859
ssdeep: 1536:+d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZQl/5:mdseIOMEZEyFjEOFqTiQmSl/5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A6F38C5572F9C075E1A309F16A7DAA91C9FEBD3815A0D5C7D3101C8B6EB41D2C23938B
sha3_384: a7f46664b19e99258268e07bd3f846304e913d40ac00d22273d09e0418435ccdcdda7a46b75be5ae75595bb5a9d1d04d
ep_bytes: 8bf08b44240c33d28d5904f7f35733ff
timestamp: 2012-11-27 15:39:32

Version Info:
0: [No Data]

SpyVoltar.Spyware.Stealer.DDS also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.322218
ClamAV	Win.Malware.Ulise-7170100-0
CAT-QuickHeal	Trojan.GenericPMF.S23015054
ALYac	Gen:Variant.Lazy.322218
Malwarebytes	SpyVoltar.Spyware.Stealer.DDS
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.36196.kmZ@aSDaJgc
Cyren	W32/Voltar.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.AUE
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Lazy.322218
Avast	Win32:Buterat-WQ [Trj]
Tencent	Malware.Win32.Gencirc.115ab09f
Emsisoft	Gen:Variant.Lazy.322218 (B)
F-Secure	Trojan.TR/Vundo.fvtym
VIPRE	Gen:Variant.Lazy.322218
TrendMicro	TROJ_GEN.R03BC0DEO23
McAfee-GW-Edition	BehavesLike.Win32.Generic.cz
FireEye	Generic.mg.665cc7d808025a9b
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Lazy.322218
Avira	TR/Vundo.fvtym
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.Vundo
Arcabit	Trojan.Lazy.D4EAAA
Microsoft	Trojan:Win32/Vundo.gen!AW
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R300903
McAfee	GenericRXHS-IM!665CC7D80802
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0DEO23
Rising	Trojan.Clicker!1.BC6E (CLASSIC)
Ikarus	Virus.Win32.Vundo
MaxSecure	Trojan.Malware.205110226.susgen
Fortinet	W32/Vundo.KRKBF!tr
AVG	Win32:Buterat-WQ [Trj]
Cybereason	malicious.1d2e94
DeepInstinct	MALICIOUS

How to remove SpyVoltar.Spyware.Stealer.DDS?

SpyVoltar.Spyware.Stealer.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X