Trojan

Trojan.Win32.Dllhijacker.ss malicious file

Malware Removal

The Trojan.Win32.Dllhijacker.ss is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Dllhijacker.ss virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

How to determine Trojan.Win32.Dllhijacker.ss?


File Info:

crc32: C4C24FB4
md5: c4ff0d300e88d9dcbca5e11e28b2e80d
name: C4FF0D300E88D9DCBCA5E11E28B2E80D.mlw
sha1: 010743e6572d82bac224d49a7ad6db4797e54de3
sha256: d0c53f6725e2ee4d89413a5f0c9f58764559bac99e865ddcac296ec82a7cb862
sha512: a0527471f4471d146c87c7d6ae7aff0d4ca74b28d47cd58f089d94a4792e627efc56af58cfaef4f60cc20246c824e7c4719bfe22c0b6094939aebfa1dc0f6b7f
ssdeep: 12288:N9WHGqxqT7Fd+55NYHQsMBuwg2+XRk268BucnUFKOX4y:NqGqUT7Fd+bNYHuGXR0
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2019-2021 SpriteOvO. All rights reserved.
InternalName: version.dll
FileVersion: 0.3.2.0
CompanyName: SpriteOvO
ProductName: Telegram-Anti-Revoke (Win10)
ProductVersion: 0.3.2.0
FileDescription: Telegram local messages anti-revoke plugin
OriginalFilename: github.com/SpriteOvO/Telegram-Anti-Revoke
Translation: 0x0800 0x04b0

Trojan.Win32.Dllhijacker.ss also known as:

K7GWSpyware ( 005725c51 )
K7AntiVirusSpyware ( 005725c51 )
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Dllhijacker.ss
AlibabaTrojan:Win32/Dllhijacker.3a37a5a8
BitDefenderThetaGen:NN.ZedlaF.34678.Eu8@a08x9Ijj
eGambitUnsafe.AI_Score_97%
IkarusTrojan.Spy

How to remove Trojan.Win32.Dllhijacker.ss?

Trojan.Win32.Dllhijacker.ss removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment