NSIS/TrojanDownloader.Chindo.E malicious file

The NSIS/TrojanDownloader.Chindo.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What NSIS/TrojanDownloader.Chindo.E virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine NSIS/TrojanDownloader.Chindo.E?


File Info:
name: 40514F0E544E52BCDD7F.mlw
path: /opt/CAPEv2/storage/binaries/9306f026ab270f14a08d2a95570fabb9fc93c0ac2808734221f738d0bcb6226a
crc32: 31CE2CD7
md5: 40514f0e544e52bcdd7f4945b1288a9c
sha1: 09f3024d9149a37a43dbc5c323927dd38d679ff6
sha256: 9306f026ab270f14a08d2a95570fabb9fc93c0ac2808734221f738d0bcb6226a
sha512: f6a06f1b8571fc8e85f5e77ebdc6299628571940d9d69c20af6039007aa133ec2dad0a604cc39be41810e2cd74467ca544348830cf26a0ca184649e80d99e19b
ssdeep: 1536:Xf4exGDkeZ4mOoSgJEAJJR8Q2qC91sdT1QuFP7:P4eYZ4+1JXJJk91sjQC7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16653BF1667D0C9B7D5E206701BFBEB7FE7FBD28406646B434F606F7B2C216028919292
sha3_384: 17de989c40a9936c59a45356ee48a552edbb70b7f6ab7ab813728edd3a9b291a8d91f1265124be95d00afc26dcdc024a
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-18 21:33:32

Version Info:
0: [No Data]

NSIS/TrojanDownloader.Chindo.E also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Multi.Generic.lY3n
McAfee	Artemis!40514F0E544E
Cylance	Unsafe
Sangfor	Trojan.Win32.Chindo.8
Elastic	malicious (high confidence)
ESET-NOD32	NSIS/TrojanDownloader.Chindo.E
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Downloader.84425-1
Kaspersky	not-a-virus:AdWare.NSIS.ExecCmd.ai
NANO-Antivirus	Trojan.Nsis.Feasu.djrzxc
Avast	Win32:Malware-gen
Sophos	AdLoad (PUA)
Comodo	Application.Win32.MeinV.AK@57p4lw
Baidu	NSIS.Trojan.Silent.a
Google	Detected
Microsoft	Trojan:Win32/Wacatac.B!ml
VBA32	TrojanDropper.Agent
Ikarus	Trojan-Downloader.Win32.Adload
Fortinet	W32/Chindo.B!tr.dldr
AVG	Win32:Malware-gen
Cybereason	malicious.e544e5
Panda	Trj/CI.A

How to remove NSIS/TrojanDownloader.Chindo.E?

NSIS/TrojanDownloader.Chindo.E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X