Categories: Virus

How to remove “Virut.Virus.FileInfector.DDS”?

The Virut.Virus.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virut.Virus.FileInfector.DDS virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (11 unique times)
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Tries to unhook or modify Windows functions monitored by Cuckoo
Attempts to modify proxy settings

Related domains:

ts.xunleihd.com

ww7.xunleihd.com

www.yyets.com

s22.cnzz.com

tu.cvnad.com

fonts.googleapis.com

parking.parklogic.com

ocsp.pki.goog

fonts.gstatic.com

How to determine Virut.Virus.FileInfector.DDS?


File Info:
crc32: C3452531md5: dea843bca6d5cfacc0081ff84378f927name: DEA843BCA6D5CFACC0081FF84378F927.mlwsha1: 16134240cce673657c74d006eb7dbfc3d19122dfsha256: dcb601056be45afe7aaed9af21a591ff2af94b920147ad03b7a88d907e4f3c4asha512: df448a63884115026190f4483ee9771827706c2c21d538addca77beeb2a7f5f6b6ce5b7b7086de4a3259e09954f6736e4383bf9100c951770af881ab9aaa221essdeep: 12288:wzeMhMw796Cqz84kZAkghmfNQ8Ts2gV9BAa4Dn6R:qeMhRRqzduAkgINQ8Tu3Bj4Dn6Rtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2013InternalName: TSearch.exeFileVersion: 5.4.0.60CompanyName: XunleiHDProductName: x8fc5x96f7x8d44x6e90x52a9x624bProductVersion: 5.4.0.60FileDescription: TSearchOriginalFilename: TSearch.exeTranslation: 0x0804 0x04b0

Virut.Virus.FileInfector.DDS also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Application.Downloader.ALB
FireEye	Generic.mg.dea843bca6d5cfac
ALYac	Application.Downloader.ALB
Cylance	Unsafe
VIPRE	Virus.Win32.Virut.ce.6 (v)
AegisLab	Trojan.Win32.Xunleihd.tnvU
Sangfor	Malware
K7AntiVirus	Adware ( 004dc16f1 )
BitDefender	Application.Downloader.ALB
K7GW	Adware ( 004dc16f1 )
Cybereason	malicious.ca6d5c
BitDefenderTheta	Gen:NN.ZexaE.34804.Mu0@amMqvgkj
Cyren	W32/S-b0e984bf!Eldorado
Symantec	SecurityRisk.gen1
ESET-NOD32	a variant of Win32/XunleiHD.A potentially unwanted
APEX	Malicious
Avast	Win32:Patched-AJW [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.Xunleihd.b
NANO-Antivirus	Trojan.Win32.HTUS4939.domngl
Ad-Aware	Application.Downloader.ALB
Emsisoft	Application.Downloader.ALB (B)
Comodo	Application.Win32.AdWare.XunleiHD.C@6lbsvy
F-Secure	Trojan.TR/Patched.Gen
Zillya	Trojan.Xunleihd.Win32.1
TrendMicro	PE_VIRUX.Q-1
McAfee-GW-Edition	BehavesLike.Win32.BadFile.jh
Sophos	Generic PUA BG (PUA)
Ikarus	PUA.XunleiHD
Jiangmin	Variant.Symmi.zy
Webroot	W32.Xunleihd
Avira	TR/Patched.Gen
Antiy-AVL	Virus/Win32.Virut.ce
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Application.Downloader.ALB
ZoneAlarm	Trojan-Downloader.Win32.Xunleihd.b
GData	Application.Downloader.ALB
McAfee	Artemis!DEA843BCA6D5
MAX	malware (ai score=73)
VBA32	TrojanDownloader.Xunleihd
Malwarebytes	Virut.Virus.FileInfector.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	PE_VIRUX.Q-1
Rising	Trojan.Generic@ML.94 (RDML:ufh9hxnDBtbnxbcOkoUDog)
Yandex	Trojan.GenAsa!7Q3u2y4y/Oc
SentinelOne	Static AI – Malicious PE – File Infector
Fortinet	Riskware/XunleiHD
AVG	Win32:Patched-AJW [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.Downloader.460