NSIS/Injector.CJB information

The NSIS/Injector.CJB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What NSIS/Injector.CJB virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine NSIS/Injector.CJB?


File Info:
name: EB6A827355D9EAD335A2.mlw
path: /opt/CAPEv2/storage/binaries/938a2ff0a6e83b8f37dd25cce0bdd5e5e373006a58b7e08bdd434e2fcef09f99
crc32: C9F2F6E1
md5: eb6a827355d9ead335a2686b7e216663
sha1: a1269c264385aac47d9379b5401f405edcf73806
sha256: 938a2ff0a6e83b8f37dd25cce0bdd5e5e373006a58b7e08bdd434e2fcef09f99
sha512: 5e2b502b6050d30fa071d5bc0bcc77a94932a0e5dd05215994e1aabe21bafdb76f5505581eed5a0d34166f054ae2b358c58c0fe1b47e8368473c867d35effc20
ssdeep: 3072:AnPdzuK8Jdw4TMJw3uE6GM8bMo9Xyt2rQUakW8vaRSLfyNTHcy7k7Puy0xzZTJCj:AnPdudwDQVMoNyUNXC0LC8y7k7myn3WW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17E14B047BB5C879ED3AA4BB2393A0771469CEF5316406D1ABBD4FD2D293258CAC032D1
sha3_384: 540f4357f0a0f29b47f35db9caf55e620d8fea5ee3c9cacd674812dc7067e73cb8c683fa3a29d370835302c6e2668e35
ep_bytes: 81ecf80300005556576a205f33ed6801
timestamp: 2023-07-02 02:09:43

Version Info:
Comments: engenderer sbeskums
CompanyName: billionoverskud
InternalName: papirclips excellence.exe
LegalCopyright: papirindkbene spongian udlsningers
LegalTrademarks: clotildes socialministeriet wimbling
Translation: 0x0409 0x04b0

NSIS/Injector.CJB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
ESET-NOD32	NSIS/Injector.CJB
Kaspersky	HEUR:Trojan.Win32.Makoob.gen
Avast	Win32:Malware-gen
ZoneAlarm	HEUR:Trojan.Win32.Makoob.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Cylance	unsafe
Ikarus	Trojan.NSIS.Agent
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)

How to remove NSIS/Injector.CJB?

NSIS/Injector.CJB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X