Renamer.Virus.FileInfector.DDS

Short bio

Renamer.Virus.FileInfector.DDS is Malwarebytes’ detection name for a type of viruses detected by Malwarebytes’ Katana engine. The virus renames legitimate files and hides them. It then takes the place of those files.

The detection names are produced by Malwarebytes 4 and Malwarebytes business products. These generic malware detections are due to our new automated signature system called BytesTotal and specifically the DDS engine that are based on Machine Learning technology with 100% autonomous learning which don’t require any human interaction to correctly identify malware. These techniques are part of Malwarebytes’ Katana engine and were developed for automated mass detection of wide ranges of malware and adware.

Aftermath

Because of the renamed and replaced files a system  ight become inoperable. Removing the infected files may not be enough to get it back to a working state. Also all removable drives that have been connected to thje affected sytem may contain infected files.

Type and source of infection

Renamer.Virus.FileInfector.DDS renames legitimate files and hides them. It then takes the place of those files. It also displays worm-like behavior by copying itself to network shares. It also downloads and installs other malware on infected systems.

Protection

The Malwarebytes’ Katana engine detects unknown threats as Renamer.Virus.FileInfector.DDS by using generic detections, Machine Learning, and other Artificial Intelligence techniques to protect users from malware.