Categories: Risk

How to remove “YouXun.Riskware.Agent.DDS”?

The YouXun.Riskware.Agent.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What YouXun.Riskware.Agent.DDS virus can do?

Performs HTTP requests potentially not found in PCAP.
HTTPS urls from behavior.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine YouXun.Riskware.Agent.DDS?


File Info:
name: B70DA4C5C260856585C6.mlwpath: /opt/CAPEv2/storage/binaries/2ffc043b3432fd125c5c5b3c38244f9982fcc80a5c6c7a53f3b03c7632f49d28crc32: D1B90E9Amd5: b70da4c5c260856585c611fc75af02c9sha1: cb5c9a638bfe7e7bb2a7aef2d427ef3c70d4b306sha256: 2ffc043b3432fd125c5c5b3c38244f9982fcc80a5c6c7a53f3b03c7632f49d28sha512: 006cccc25f362047ec9e0d747a86a1ddceb9db944d5000f3071b60ed7de58257e6c9815f765a61ae9edfe6a1830a5ffe935e5836a2a44f28df6f3415daccced1ssdeep: 24576:0leXVJjzVC+7cSPe+3yokryFs1C06bCT+BopI/+jqEOriDKA:y6JWSW+3yomyIT+nWqEOriDKAtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18A55BF10B7D1E436EAB31576497EE6295169B9310B214ACBB3CC1E2E4F307D1AE3634Bsha3_384: 7030ad26405a1470f21d09889719c6ae531877e7dc3735fb994965978672340e3874c48f6621ddcd1a5a84e12961170fep_bytes: e8fa9e0000e979feffff3b0d50794e00timestamp: 2018-03-12 12:24:11
Version Info:
Comments: 游戏启动器CompanyName: www.yxdown.comFileDescription: 游迅网启动客户端FileVersion: 5, 0, 1, 6InternalName: GameStar.exeLegalCopyright: 2016-2017(C)游迅网。保留所有权利OriginalFilename: GameStar.exeProductName: 游迅网启动客户端ProductVersion: 5, 0, 1, 6Translation: 0x0804 0x04b0

YouXun.Riskware.Agent.DDS also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Adload.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.68994313
FireEye	Generic.mg.b70da4c5c2608565
Malwarebytes	YouXun.Riskware.Agent.DDS
Zillya	Tool.YouXun.Win32.301
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0050b49d1 )
Alibaba	Downloader:Win32/YXdown.03d0eca4
K7GW	Riskware ( 0050b49d1 )
Cyren	W32/YouXun.F.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/RiskWare.YouXun.H
APEX	Malicious
Kaspersky	UDS:Trojan-Downloader.Win32.Adload.gen
BitDefender	Trojan.GenericKD.68994313
NANO-Antivirus	Trojan.Win32.Adload.fmvops
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b2fdd9
Emsisoft	Trojan.GenericKD.68994313 (B)
F-Secure	PrivacyRisk.SPR/GameTool.Gen8
VIPRE	Trojan.GenericKD.68994313
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.68994313
Jiangmin	TrojanDownloader.Adload.ylo
Avira	SPR/GameTool.Gen8
Antiy-AVL	Trojan/Win32.TSGeneric
Arcabit	Trojan.Generic.D41CC509
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
McAfee	GenericRXFP-NP!B70DA4C5C260
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Downloader
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0CHS23
Rising	Adware.YouXun!1.D190 (CLASSIC)
Ikarus	PUA.RiskWare.Youxun
MaxSecure	Trojan.Malware.73418002.susgen
Fortinet	Riskware/YouXun
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)