Categories: Trojan

NSIS/TrojanDownloader.Agent.NBS.Gen removal guide

The NSIS/TrojanDownloader.Agent.NBS.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/TrojanDownloader.Agent.NBS.Gen virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Attempts to modify proxy settings
Deletes executed files from disk
Attempts to masquerade or mimic a legitimate process or file name

How to determine NSIS/TrojanDownloader.Agent.NBS.Gen?


File Info:
name: 5736B8F6C07ED39F78CE.mlwpath: /opt/CAPEv2/storage/binaries/142d8d6112e89e0b5015c62f69f18189d0d86e13652da11032a7773f92282a1dcrc32: 037B99DAmd5: 5736b8f6c07ed39f78ce3dca8a9ac8bcsha1: bf3ab61eb009cbc3b280dfe172790da7b929e535sha256: 142d8d6112e89e0b5015c62f69f18189d0d86e13652da11032a7773f92282a1dsha512: 1722a3938a876725ade9563a01b01e0d13b656f78008ba1f5b8fa86c9e504c7fff41707efc86aee5c2893b1d4b08863d57d217a77f12c43b412daf319b3645dbssdeep: 6144:ON3W7Y7DayxZ+TsWE5ZeDy1eKmx4VksyPoCrz2a2pR98sgzXDyVQ4EYc0PnW:8AY7NLeDAeyNy3VyRKsgD6Q4BOtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D8B41263B65AC457CE8A12B58C97EBB6E339AE005D254F6B37193F3F2B32241D506344sha3_384: fa559cfa50b0a57eedbe16ca2e5dbcff20c7e83c2dcfbe8d474fe8f842707d8360a6cf4b2e7a20f6d311b848128d7da0ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-02-21 19:46:17
Version Info:
Comments: 13456CompanyName: The 63063 CompanyFileDescription: InstallerFileVersion: 6.2.5.1LegalCopyright: Copyright (C)  2000-2009 The 63063 Company.LegalTrademarks: ProductName: b 11484412ProductVersion: Translation: 0x0409 0x0000

NSIS/TrojanDownloader.Agent.NBS.Gen also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
MicroWorld-eScan	Dropped:Trojan.GenericKD.1749260
FireEye	Dropped:Trojan.GenericKD.1749260
CAT-QuickHeal	TrojanDownloader.Troxen
Skyhigh	GenDownloader.x!cti
McAfee	Artemis!5736B8F6C07E
Malwarebytes	Generic.Trojan.Downloader.DDS
Sangfor	Downloader.NSIS.Agent.Vgel
K7AntiVirus	Trojan-Downloader ( 0011e62d1 )
Alibaba	TrojanDownloader:Win32/Generic.792c5ec7
K7GW	Trojan-Downloader ( 0011e62d1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Startpage.MHY
Symantec	Trojan.Gen.6
Elastic	malicious (high confidence)
ESET-NOD32	NSIS/TrojanDownloader.Agent.NBS.Gen
APEX	Malicious
TrendMicro-HouseCall	TROJ_SPNR.0BBD13
ClamAV	Win.Downloader.Nistio-9823899-0
Kaspersky	Trojan-Downloader.NSIS.Agent.cu
BitDefender	Dropped:Trojan.GenericKD.1749260
NANO-Antivirus	Trojan.Win32.Agent.bjqen
Avast	NSIS:Downloader-AK [Drp]
TACHYON	Trojan-Downloader/W32.Agent.538826
Emsisoft	Dropped:Trojan.GenericKD.1749260 (B)
F-Secure	Heuristic.HEUR/AGEN.1338472
DrWeb	Trojan.Siggen2.43744
VIPRE	Dropped:Trojan.GenericKD.1749260
TrendMicro	TROJ_SPNR.0BBD13
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.NSIS.Agent
Jiangmin	TrojanDownloader.NSIS.y
ALYac	Dropped:Trojan.GenericKD.1749260
Webroot	W32.Downloader.Troxen
Varist	W32/Risk.XIXF-1806
Avira	DR/Dldr.NSIS.Agent.CU.7
Antiy-AVL	Trojan[Downloader]/Win32.AdLoad.gen
Kingsoft	Win32.Troj.Undef.a
Microsoft	Trojan:Win32/Rimod!rfn
Xcitium	Malware@#cqv16dfxu16i
Arcabit	Trojan.Generic.D1AB10C
ZoneAlarm	Trojan-Downloader.NSIS.Agent.cu
GData	Dropped:Trojan.GenericKD.1749260
Cynet	Malicious (score: 100)
VBA32	TrojanDownloader.Agent
Google	Detected
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Trj/CI.A
Tencent	Nsis.Trojan-Downloader.Ader.Kjgl
SentinelOne	Static AI – Suspicious PE
Fortinet	Malware_fam.B
AVG	NSIS:Downloader-AK [Drp]
Cybereason	malicious.6c07ed
DeepInstinct	MALICIOUS
alibabacloud	Trojan[downloader]:Win/Agent.NBS