Categories: Malware

What is “NSIS/Injector.BUR”?

The NSIS/Injector.BUR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/Injector.BUR virus can do?

Behavioural detection: Executable code extraction – unpacking
A file was accessed within the Public folder.
Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
A scripting utility was executed

How to determine NSIS/Injector.BUR?


File Info:
name: BEC78DF47FF8CF0B1961.mlwpath: /opt/CAPEv2/storage/binaries/fb4acd018acf7a2682ea82e941f8167c2008bbdb7fec77ef8fc91d786835c309crc32: DE08BF10md5: bec78df47ff8cf0b1961430b92790ae0sha1: 25500dd32e965451340cf48d1c010d3840cfebccsha256: fb4acd018acf7a2682ea82e941f8167c2008bbdb7fec77ef8fc91d786835c309sha512: 7e37393ec7c0ad3bbd9e9c649556303176e77cfd7e1c9c3f7e03bcc4ae4b5fe30266402e6d5d60695bb40c6609934944d1cf99448089a12814a131d2ce700e18ssdeep: 6144:Tps/ya+u+kM3zB99Go0YAP9vVbOOt2AeNDyQ2cQn7bk6bhs/+EeP:Fa+uGjv0YUVbLHcGFbhs/YPtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1105412433BB4C5B3F5A4CBB1F9BB6F1B2FB9507C8658134B7B448A5438924B58B0E909sha3_384: a64a6e321dc504ec4a4cf77f2cb593f71b3b1dd2f55166043757ef8083e971ec497617d53918fbc20f40805e24a3155dep_bytes: 81ec8401000053565733db6801800000timestamp: 2016-12-11 21:50:52
Version Info:
Comments: Superheterodyne Ubedragelige BiotinCompanyName: Blundens dommersdersFileVersion: 1.4.0.0LegalTrademarks: BrumbasserneProductName: spndeskivernes SkyttekdersTranslation: 0x0409 0x04e4

NSIS/Injector.BUR also known as:

Lionic	Trojan.Win32.Alien.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.65601489
FireEye	Trojan.GenericKD.65601489
CAT-QuickHeal	Trojan.Guloader
Skyhigh	RDN/Leonem
McAfee	RDN/Leonem
Malwarebytes	Trojan.Dropper
Zillya	Trojan.Alien.Win32.2717
Sangfor	Trojan.Win32.Alien.Vrly
K7AntiVirus	Trojan ( 0059f3f61 )
Alibaba	Trojan:Win32/Alien.5491e4e9
K7GW	Trojan ( 0059f3f61 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Genus.OBP
Symantec	Trojan Horse
ESET-NOD32	NSIS/Injector.BUR
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Alien.gen
BitDefender	Trojan.GenericKD.65601489
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.65601489 (B)
F-Secure	Heuristic.HEUR/AGEN.1368750
VIPRE	Trojan.GenericKD.65601489
TrendMicro	TROJ_FRS.0NA103BM23
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Webroot	W32.Malware.Gen
Google	Detected
Avira	HEUR/AGEN.1368750
Varist	W32/Trojan.DBRC-7094
Antiy-AVL	Trojan/NSIS.Injector
Kingsoft	win32.troj.undef.a
Xcitium	Malware@#3lkqkpjj2ojb2
Arcabit	Trojan.Generic.D3E8FFD1
ViRobot	Trojan.Win.Z.Agent.297032
ZoneAlarm	HEUR:Trojan.Win32.Alien.gen
GData	Trojan.GenericKD.65601489
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.GuLoader.C5385348
VBA32	Trojan.GuLoader
ALYac	Trojan.Agent.GuLoader
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_FRS.0NA103BM23
Tencent	Win32.Trojan.FalseSign.Yfow
Yandex	Trojan.Igent.bZEzEW.3
MaxSecure	Trojan.W32.Alien.gen
Fortinet	W32/BUR!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS