Backdoor.NanoCore.NSIS removal tips

The Backdoor.NanoCore.NSIS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.NanoCore.NSIS virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Backdoor.NanoCore.NSIS?


File Info:
crc32: B2492399
md5: 84220856166a1cb4b7d4716907f7cf2e
name: 84220856166A1CB4B7D4716907F7CF2E.mlw
sha1: ab9ae59efe67be7dbae53f811432162f29fc20e2
sha256: a24208df654ff01f46fc3369e7927af815dcfee871e9a2e46b03cb493561953e
sha512: 74fd8ca0d3effe89566285d07c045e6436081d4f4dcbef48a76eb007aef57eebc918cf77f9516e2cbe4fb7053cecf6f23895c137c20cf7313c726a6c9c9c90da
ssdeep: 6144:sTqjF9cyv0+3+KGlQXX+L+bxXiUp+uIH/3WJVE4f6R8phk/:ssD02+KGU+6bxi0c3WJVwR8pW/
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: audit
FileVersion: 5.6.7.6
CompanyName: either
LegalTrademarks: flannel
Comments: neurology
ProductName: merely
FileDescription: manic
Translation: 0x0000 0x04e4

Backdoor.NanoCore.NSIS also known as:

K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.Loader.851
MicroWorld-eScan	Dropped:Trojan.Zuf.1.Gen
ALYac	Dropped:Trojan.Zuf.1.Gen
Cylance	Unsafe
Sangfor	Trojan.Win32.Agensla.gen
Alibaba	TrojanPSW:Win32/Agensla.5e045603
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.efe67b
Cyren	W32/Ninjector.J.gen!Camelot
ESET-NOD32	NSIS/Injector.AMT
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-PSW.Win32.Agensla.gen
BitDefender	Dropped:Trojan.Zuf.1.Gen
Ad-Aware	Dropped:Trojan.Zuf.1.Gen
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
FireEye	Generic.mg.84220856166a1cb4
SentinelOne	Static AI – Malicious PE
Avira	TR/Injector.ujghd
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/Tnega.KF!MTB
Gridinsoft	Risk.Win32.CoinMiner.sd!s1
Arcabit	Trojan.Zuf.1.Gen
ZoneAlarm	HEUR:Trojan-PSW.Win32.Agensla.gen
GData	MSIL.Backdoor.Nancat.7VG5P3
AhnLab-V3	Trojan/Win.Generic.C4535227
McAfee	Artemis!84220856166A
MAX	malware (ai score=81)
Malwarebytes	Backdoor.NanoCore.NSIS
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.F0D1C00FP21
Ikarus	Win32.SuspectCrc
Fortinet	W32/Kryptik.J!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Backdoor.NanoCore.NSIS?

Backdoor.NanoCore.NSIS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X