NSIS/TrojanDownloader.Agent.NXY malicious file

The NSIS/TrojanDownloader.Agent.NXY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/TrojanDownloader.Agent.NXY virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine NSIS/TrojanDownloader.Agent.NXY?


File Info:
crc32: F51399CF
md5: 7b4fa1b4529b43fe976523cbb4906780
name: 7B4FA1B4529B43FE976523CBB4906780.mlw
sha1: 8a658f9168125e4eb84d8c4361a8420e22db28c2
sha256: c30465e007c7982801a6c3546e678dadcb8b264f6843f39ab6af9c4e4e0bdcc2
sha512: 19519d9ac6dc0ebc71e099fe282c0f02188ca901a8e54b7a0921cd259e08b998f0035843a682ab20e488aa4b01d3cee5dfdd9cebfbcfdc012739795109ef87a1
ssdeep: 768:2HJd0TpH2+bQ2dUWVX9Hfv1JMWmtLEJOyuBxG0D3mjfS3XJx2Mif5r4EgLhsVoG0:2pgpHzb9dZVX9fHMvG0D3XJx2Mwr4Eal
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
OriginalFilename: posted.exe
ProductName: posted
Translation: 0x0000 0x04e4

NSIS/TrojanDownloader.Agent.NXY also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan-Downloader ( 005535b51 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader32.58646
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	TrojanDownloader:Win32/DropperX.f76f3b50
K7GW	Trojan-Downloader ( 005535b51 )
Cybereason	malicious.168125
Cyren	W32/Agent.CJH.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	NSIS/TrojanDownloader.Agent.NXY
APEX	Malicious
Avast	NSIS:DropperX-gen [Drp]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
NANO-Antivirus	Trojan.Nsis.Agent.fnwqvt
Tencent	Win32.Trojan-downloader.Agent.Aiip
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R067C0DIG21
McAfee-GW-Edition	BehavesLike.Win32.AdwareAdload.ph
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1142933
Microsoft	Trojan:Win32/Skeeyah.A!rfn
AhnLab-V3	Trojan/Win32.Malware-gen.R372760
McAfee	RDN/Generic Downloader.x
VBA32	TrojanDownloader.Agent
Malwarebytes	Trojan.AdLoad
TrendMicro-HouseCall	TROJ_GEN.R067C0DIG21
Rising	Downloader.Agent/NSIS!1.BBD4 (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.EDJ!tr.dldr
AVG	NSIS:DropperX-gen [Drp]
Paloalto	generic.ml

How to remove NSIS/TrojanDownloader.Agent.NXY?

NSIS/TrojanDownloader.Agent.NXY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

NSIS/TrojanDownloader.Agent.NXY malicious file