Categories: Malware

What is “BrowserModifier.NSIS.Xiazai.R”?

The BrowserModifier.NSIS.Xiazai.R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BrowserModifier.NSIS.Xiazai.R virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine BrowserModifier.NSIS.Xiazai.R?


File Info:
name: BBEB9A0252FAE8BB9DCD.mlwpath: /opt/CAPEv2/storage/binaries/639611341aaf51154b5bb5227b9988976bd05ae3766409cf39064a36d227ce27crc32: 1903D211md5: bbeb9a0252fae8bb9dcd375d27812b3dsha1: 2ca0dc357eedbd0b52857531043d3e6e441f5b90sha256: 639611341aaf51154b5bb5227b9988976bd05ae3766409cf39064a36d227ce27sha512: e635cfe7b400ffffc51dfdd19766aa2777b9bfbddb37f1aaadd826de4ca1fb172f1ada97dd677bd12717aa0622aa84e7a200816b46aff8380238fd0b014d2e07ssdeep: 3072:mbzUckFZWFT+xclcA5dUSmUmONPc3fBVHRO16Hdp1wyR:m/AFZ8+aH5d+UmNfBfm6HjpRtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D2B3AE26BBD58466D24E99332EA2C3F60070BC0152E0555727D6BFAF7636381E1287BFsha3_384: d275085aaf97c7714bb8ce3e4201a07a800f4ed288524559009b92f6e4cc9daccf59efe8baa14e87d6185a01225935c2ep_bytes: 81ec840100005355565733db68018000timestamp: 2016-06-20 08:42:23
Version Info:
FileDescription: DownloaderFileVersion: 6.0.0.1LegalCopyright: OriginalFilename: DownloaderProductName: DownloaderProductVersion: 6.0.0.1Translation: 0x0804 0x03a8

BrowserModifier.NSIS.Xiazai.R also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKDZ.94687
ClamAV	Win.Trojan.Siggen-6261194-0
FireEye	Trojan.GenericKDZ.94687
CAT-QuickHeal	BrowserModifier.NSIS.Xiazai.R
ALYac	Trojan.GenericKDZ.94687
Cylance	unsafe
Zillya	Adware.Agent.Win32.102399
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005195d71 )
Alibaba	Trojan:Win32/Xiazai.96980cb8
K7GW	Trojan ( 005195d71 )
CrowdStrike	win/grayware_confidence_100% (W)
Cyren	W32/Mikey.U.gen!Eldorado
Symantec	PUA.Downloader
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKDZ.94687
Avast	Other:Malware-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bdef88
Sophos	Mal/Generic-S
DrWeb	Trojan.Siggen7.65186
VIPRE	Trojan.GenericKDZ.94687
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
Emsisoft	Trojan.GenericKDZ.94687 (B)
GData	Trojan.GenericKDZ.94687
Jiangmin	AdWare.Agent.aizv
Antiy-AVL	GrayWare[AdWare]/Win32.PackedNsisMod.o
Arcabit	Trojan.Generic.D171DF
SUPERAntiSpyware	PUP.DownloadAdmin/Variant
Microsoft	Trojan:Win32/Vindor!pz
Google	Detected
AhnLab-V3	PUP/Win32.Installer.R185010
McAfee	PUP-FRS
MAX	malware (ai score=81)
Malwarebytes	Generic.Malware.AI.DDS
Yandex	PUA.Downloader!LnA66Z1Z2LM
Ikarus	BHO.Win32.Xiazai
MaxSecure	Downloader.NSIS.Hafen.gen
Fortinet	W32/GenericKDZ.94687!dam
AVG	Other:Malware-gen [Trj]
Cybereason	malicious.57eedb
DeepInstinct	MALICIOUS