Should I remove “NSIS/TrojanDownloader.Agent.NWV”?

The NSIS/TrojanDownloader.Agent.NWV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What NSIS/TrojanDownloader.Agent.NWV virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine NSIS/TrojanDownloader.Agent.NWV?


File Info:
crc32: 13799C6C
md5: 5531e0a1613df0fae933650acc369295
name: 5531E0A1613DF0FAE933650ACC369295.mlw
sha1: d68e1a05b1439f6ec6fdbb24805aeafef49ff6d8
sha256: 15ce267eaa860218f56526a52a7d0fffdcd49257fb76c9905e76688cdc3c75df
sha512: 8bf8b3b55b46da61ab85aa658595ae61287385f04076c6e808bcd41865f0e8112852fee28f957034445dd7f3a992d2987862f5c9ae9eafa7fc4c0b7e1a58f737
ssdeep: 1536:41E/rzW2pakRmB7BW3nKsclp+3DF9AdPZwL6KCIAmk1nUu:41E/rS2paccKntclpPdPZw0hau
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

NSIS/TrojanDownloader.Agent.NWV also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop7.40845
MicroWorld-eScan	Gen:Variant.NSIS.Downloader.1
FireEye	Generic.mg.5531e0a1613df0fa
McAfee	Artemis!5531E0A1613D
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
CrowdStrike	win/malicious_confidence_70% (D)
BitDefender	Gen:Variant.NSIS.Downloader.1
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-Downloader.NSIS.Convagent.gen
NANO-Antivirus	Trojan.Nsis.Drop.euvqgm
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1116899
McAfee-GW-Edition	BehavesLike.Win32.Vopak.kc
Emsisoft	Gen:Variant.NSIS.Downloader.1 (B)
Avira	HEUR/AGEN.1116899
Microsoft	Trojan:Win32/Ditertag.A
Arcabit	Zum.Trojan.Downloader.NOLE.1
ZoneAlarm	HEUR:Trojan-Downloader.NSIS.Convagent.gen
GData	NSIS.Trojan-Downloader.Agent.AIR
Cynet	Malicious (score: 90)
ALYac	Zum.Trojan.Downloader.NOLE.1
Malwarebytes	Generic.Malware/Suspicious
APEX	Malicious
ESET-NOD32	NSIS/TrojanDownloader.Agent.NWV
SentinelOne	Static AI – Suspicious PE – Downloader
Fortinet	W32/Agent.NWV!tr.dldr
AVG	Win32:Malware-gen
Cybereason	malicious.1613df
Paloalto	generic.ml
Qihoo-360	HEUR/QVM42.2.63A3.Malware.Gen

How to remove NSIS/TrojanDownloader.Agent.NWV?

NSIS/TrojanDownloader.Agent.NWV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X