Worm

About “Worm:Win32/Kasidet.B” infection

Malware Removal

The Worm:Win32/Kasidet.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Kasidet.B virus can do?

  • Drops a binary and executes it
  • Mimics the file times of a Windows system file
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Collects information to fingerprint the system

Related domains:

nestopiawork.tk
cassstessz.tk

How to determine Worm:Win32/Kasidet.B?


File Info:

crc32: 2CCBD1BB
md5: 1b0e085c72c5294041bcb24f48f2f75f
name: 1B0E085C72C5294041BCB24F48F2F75F.mlw
sha1: 7fd2cc8b3fdafe8862755fc81e41930c012c6dfe
sha256: da7f4455445cf678446f5b50384106090daa66cf88185d9e815e35c462b901ef
sha512: 99105b1e945298844c69ec35202dcd60724eada048fc8086068ac80b6089816bc68f97849a105249e268887d34bc8aa6f88ce590fc942681b192932a0064931d
ssdeep: 1536:WhHlHCEA5tNSzs/KjuV9Tw4pSCMBu7tSLArbdbI:wHlHVit5/KjuV9Tw4pSCFZb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Kasidet.B also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004b22ef1 )
Elasticmalicious (high confidence)
DrWebBackDoor.NewFiz.68
McAfeeGenericRXIV-DG!1B0E085C72C5
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004b22ef1 )
Cybereasonmalicious.c72c52
CyrenW32/Blocker-based!Maximus
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kasidet.AA
APEXMalicious
AvastWin32:Kasidet-B [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Mint.SP.Sneaky.1
NANO-AntivirusTrojan.Win32.Hijacker.dkhwiu
MicroWorld-eScanGen:Heur.Mint.SP.Sneaky.1
TencentWin32.Trojan.Hijacker.Dxdm
Ad-AwareGen:Heur.Mint.SP.Sneaky.1
SophosML/PE-A
ComodoWorm.Win32.Kasidet.AKDD@5q5gzb
BitDefenderThetaGen:NN.ZexaF.34170.fqW@ayGx@!m
VIPRETrojan.Win32.Generic!BT
TrendMicroWORM_KASIDET.C
McAfee-GW-EditionBehavesLike.Win32.Backdoor.nh
FireEyeGeneric.mg.1b0e085c72c52940
EmsisoftGen:Heur.Mint.SP.Sneaky.1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Hijacker.Gen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.D3D8C8
MicrosoftWorm:Win32/Kasidet.B
ArcabitTrojan.Mint.SP.Sneaky.1
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Heur.Mint.SP.Sneaky.1
AhnLab-V3Worm/Win32.Kasidet.R133161
Acronissuspicious
VBA32BScope.Backdoor.Androm
MAXmalware (ai score=85)
MalwarebytesMalware.AI.3747663890
PandaTrj/Genetic.gen
TrendMicro-HouseCallWORM_KASIDET.C
RisingTrojan.Generic@ML.94 (RDML:AsFxUu4JfnxQAk3zhkMR/Q)
YandexTrojan.GenAsa!WrBmi4D7HD0
IkarusWorm.Win32.Kasidet
FortinetW32/Generic.AP.296E68!tr
AVGWin32:Kasidet-B [Trj]
Paloaltogeneric.ml

How to remove Worm:Win32/Kasidet.B?

Worm:Win32/Kasidet.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment