Categories: Malware

What is “NSIS/Injector.TP”?

The NSIS/Injector.TP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/Injector.TP virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Reads data out of its own binary image
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

How to determine NSIS/Injector.TP?


File Info:
crc32: 18924880md5: 760319cc383bf12298816d6b17bce260name: 760319CC383BF12298816D6B17BCE260.mlwsha1: 3eb77252cfad0e7c7b013f6935883a6eb003c893sha256: 8f47a7d4d6a7586d52d2f74fd56840882f66d60a9ba730f27c742479b7237a25sha512: ec65a6293867943719e7191a7ba45b17553dd7aa3461fc7fe68788ff8a33ed541729e54705a85f33a3164c9455e3db83becc6c984226d9d0450b82246ab2272cssdeep: 24576:h2+7LSniDiclRuy2kCBsOzoRV3NrA6yFUFb5B2dIkx3GXrv0u:I+7LFDiOX4sOzoRV3EFUPB2fAxtype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

NSIS/Injector.TP also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Shade.j!c
DrWeb	Trojan.Encoder.7111
ALYac	Trojan.Ransom.BJT
Cylance	Unsafe
Sangfor	Ransom.Win32.Shade.lok
Alibaba	Ransom:Win32/Shade.e286730f
K7GW	Trojan ( 004b39e91 )
K7AntiVirus	Trojan ( 004b39e91 )
Symantec	Ransom.Troldesh
ESET-NOD32	a variant of NSIS/Injector.TP
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Ransom.Win32.Shade.lok
BitDefender	Trojan.Ransom.BJT
NANO-Antivirus	Trojan.Win32.Shade.emdxpn
ViRobot	Trojan.Win32.S.Agent.919499
MicroWorld-eScan	Trojan.Ransom.BJT
Tencent	Win32.Trojan.Shade.Aexn
Ad-Aware	Trojan.Ransom.BJT
Sophos	Mal/Generic-R + Troj/Ransom-EFB
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.ICLoader.cc
FireEye	Generic.mg.760319cc383bf122
Emsisoft	Trojan.Ransom.BJT (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1117994
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/Troldesh.A
Arcabit	Trojan.Ransom.BJT
GData	Trojan.Ransom.BJT
TACHYON	Ransom/W32.Shade.919499
McAfee	RDN/Ransom.bz
MAX	malware (ai score=100)
VBA32	Hoax.Shade
Panda	Trj/CI.A
Fortinet	W32/Injector.TD!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml