Should I remove “NSIS/Adware.Agent.X”?

The NSIS/Adware.Agent.X is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What NSIS/Adware.Agent.X virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Enumerates running processes
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid

How to determine NSIS/Adware.Agent.X?


File Info:
name: A64B221D136A1AA02547.mlw
path: /opt/CAPEv2/storage/binaries/4ecae022bbc04612d84f84e7799e4a74a832496b0a6b8b1ff9116dd992fcb83f
crc32: E04E9086
md5: a64b221d136a1aa025473c24fe048081
sha1: 683c20c73ccbb3e0b03363a55621ce1abf68659a
sha256: 4ecae022bbc04612d84f84e7799e4a74a832496b0a6b8b1ff9116dd992fcb83f
sha512: 332fe75f61cd0e9aebbb8e32b8ac870f7e140bfe1ec6b585bfa9cd618bcf0978c47600bb43c99072b42ac3a5838f16c9b7be0239e1c443cea0215da55384c334
ssdeep: 3072:4gXdZt9P6D3XJcMNOeTc5/e96Hxb1/2V1ZhtMUDlDDgT:4e34fNDoU9kb1/2V1ZhtMUp3W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T115D3022E52E29977E9C707724877E339F7FA92C441A1151707E02FEE3E115D34E22A86
sha3_384: 362f2ea86f23de2b958c90572f412f09c3224735426f1efa71f5e7b228920215f8e5b5d718440477868306c8bdaaff29
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
0: [No Data]

NSIS/Adware.Agent.X also known as:

Lionic	Trojan.Win32.Dapato.b!c
McAfee	Artemis!A64B221D136A
Cylance	Unsafe
Sangfor	Trojan.Win32.Dapato.gen
K7AntiVirus	Adware ( 0058be0a1 )
Alibaba	TrojanDropper:Win32/Dapato.246d08a7
K7GW	Adware ( 0058be0a1 )
Symantec	Trojan.Gen.2
ESET-NOD32	NSIS/Adware.Agent.X
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Dropper.Win32.Dapato.gen
Avast	NSIS:DropperX-gen [Drp]
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Microsoft	Program:Win32/Uwamson.A!ml
Gridinsoft	Ransom.Win32.Sabsik.sa
GData	Win32.Trojan.BSE.1E8GZHU
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Malware-gen.C4799135
VBA32	TrojanDropper.Dapato
TrendMicro-HouseCall	TROJ_GEN.R002H07KS21
AVG	NSIS:DropperX-gen [Drp]

How to remove NSIS/Adware.Agent.X?

NSIS/Adware.Agent.X removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X