Categories: Trojan

Should I remove “NSIS/TrojanDownloader.Agent.NPH”?

The NSIS/TrojanDownloader.Agent.NPH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/TrojanDownloader.Agent.NPH virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Drops a binary and executes it
Anomalous binary characteristics

Related domains:

softwaredl.in

How to determine NSIS/TrojanDownloader.Agent.NPH?


File Info:
crc32: 53871EAFmd5: 0e421007898aea0e7a08b43dff7ab85ename: 0E421007898AEA0E7A08B43DFF7AB85E.mlwsha1: b78539074dea668a7d28155ebdc9d6402568ab7esha256: eb0b809c961de66cd071bd456c5d3dbca5267f6137e01621fd62739d4a7fd59fsha512: 913b8fa6ccdc2fa70328b898871b4be3f9b987b93317c56699a4e7832c7468b60c59d9419a519f0ed7b9493717e03f92fb6dd7f61d5e6256abe54a12f83d0cf5ssdeep: 24576:AhmC4WB35eb4ij9b5L2lKNCY1a7pKPMXadlwj2JIoLfxgJ:AhmCtB35eb4ij9b5L2lKIYSPXaXwj2Jutype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

NSIS/TrojanDownloader.Agent.NPH also known as:

K7AntiVirus	Trojan ( 004ba6781 )
Lionic	Trojan.Win32.Bifrose.m!c
Elastic	malicious (high confidence)
DrWeb	BackDoor.Bifrost.23282
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.37281971
Cylance	Unsafe
Zillya	Downloader.Genome.Win32.70590
Sangfor	Suspicious.Win32.Attribute.HighConfidence
Alibaba	TrojanDownloader:Win32/Genome.60591c6f
K7GW	Trojan ( 004ba6781 )
Cybereason	malicious.74dea6
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	NSIS/TrojanDownloader.Agent.NPH
APEX	Malicious
Avast	NSIS:Fasec-CN [PUP]
Kaspersky	Trojan-Downloader.Win32.Genome.iezi
BitDefender	Trojan.GenericKD.37281971
NANO-Antivirus	Trojan.Nsis.Agent.dbociz
MicroWorld-eScan	Trojan.GenericKD.37281971
Tencent	Win32.Trojan-downloader.Genome.Gvi
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#2sxb1luz06zl2
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_SPNR.11AE13
McAfee-GW-Edition	DNSChanger.de
FireEye	Trojan.GenericKD.37281971
Emsisoft	Trojan.GenericKD.37281971 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Gen.BT
Avira	TR/Dropper.Gen
Kingsoft	Win32.Troj.Bifrose.dc.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.37281971
TACHYON	Backdoor/W32.Bifrose.976335
McAfee	Artemis!0E421007898A
MAX	malware (ai score=99)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_SPNR.11AE13
Rising	Trojan.Generic@ML.90 (RDML:4fVUT9q82lMj6athFyO8nQ)
Yandex	Backdoor.Bifrose!OrQCLTktGuY
Fortinet	W32/Bifrose.DCDG!tr.bdr
AVG	NSIS:Fasec-CN [PUP]
Paloalto	generic.ml