Should I remove “Generic.NSIS.DropperC.D056A575”?

The Generic.NSIS.DropperC.D056A575 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.NSIS.DropperC.D056A575 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Generic.NSIS.DropperC.D056A575?


File Info:
name: 591179ED69DD4B0BB45D.mlw
path: /opt/CAPEv2/storage/binaries/9c5f80ed668b8b9a284a25c230e6eeb7de5ddeca0b241a8518d43b56238aa911
crc32: C41A8A38
md5: 591179ed69dd4b0bb45d8b800996ec54
sha1: 65e70c1176fa1f17b17b24a53530065955e674f3
sha256: 9c5f80ed668b8b9a284a25c230e6eeb7de5ddeca0b241a8518d43b56238aa911
sha512: d9caa308a79da19c0a4f98b954ced81a7c2ba04489f2b13555e6e93b73025a9002959062239b813943fa0c566dff35a0048e594450b8001fba32cd355add07f5
ssdeep: 24576:KoTd1EKi3KY4iOTWJO35B3GeGR5l5Zvo8HuMpRliPXlc4Jpr/:KvB49sYnxGNvooOX7Jp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1764501696BEBECA6DD7B02BA49560DDDC1218D0DCD1311E3FAA7BEE5A93CD80350D140
sha3_384: 02abc1a8467bf472dd65fe9806d8e39dc086258cc52cf3c8bb0c829643847ce2ac7aa6bc7a142ace50e2da0f079f144e
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2016-12-11 21:50:45

Version Info:
0: [No Data]

Generic.NSIS.DropperC.D056A575 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.NSIS.Agent.4!c
DrWeb	Trojan.MulDrop7.59017
MicroWorld-eScan	Generic.NSIS.DropperC.D056A575
FireEye	Generic.NSIS.DropperC.D056A575
McAfee	Artemis!591179ED69DD
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.gen
K7AntiVirus	Trojan ( 0052618f1 )
Alibaba	VirTool:Win32/CeeInject.c3833ee0
K7GW	Trojan ( 0052618f1 )
Cybereason	malicious.d69dd4
Symantec	Trojan.Gen.2
ESET-NOD32	NSIS/Injector.YR
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Dropper.NSIS.Agent.gen
BitDefender	Generic.NSIS.DropperC.D056A575
NANO-Antivirus	Trojan.Win32.Ric.fgafuh
Avast	NSIS:CoinMiner-D [Trj]
Tencent	Nsis.Trojan.Generic.Sunp
Sophos	Mal/Generic-S
Comodo	Malware@#qia9py269o64
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	NSIS/ObfusInjector.e
Emsisoft	Generic.NSIS.DropperC.D056A575 (B)
SentinelOne	Static AI – Suspicious PE
GData	Generic.NSIS.DropperC.D056A575
Avira	HEUR/AGEN.1116891
MAX	malware (ai score=100)
ViRobot	Trojan.Win32.S.Agent.1252900
Microsoft	VirTool:Win32/CeeInject.XZ!bit
Cynet	Malicious (score: 99)
VBA32	TrojanDropper.Agent
ALYac	Generic.NSIS.DropperC.D056A575
APEX	Malicious
Fortinet	W32/Injector.ABF!tr
AVG	NSIS:CoinMiner-D [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Generic.NSIS.DropperC.D056A575?

Generic.NSIS.DropperC.D056A575 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X