About “NSIS/TrojanDownloader.Grinidou.H” infection

The NSIS/TrojanDownloader.Grinidou.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/TrojanDownloader.Grinidou.H virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Attempts to modify Internet Explorer’s start page
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• CAPE detected the shellcode patterns malware family
• Uses suspicious command line tools or Windows utilities
• Yara detections observed in process dumps, payloads or dropped files

How to determine NSIS/TrojanDownloader.Grinidou.H?

File Info:
name: CDCD8946D6BA5A64B132.mlw
path: /opt/CAPEv2/storage/binaries/3d22fe71a109e1599658a3ee801bda57561a522b805c9b3c5bd95e8e86de4de3
crc32: E5D09F42
md5: cdcd8946d6ba5a64b132fbfe57148610
sha1: 6f30730d93f1ae97934f761fc534222cabba0b0e
sha256: 3d22fe71a109e1599658a3ee801bda57561a522b805c9b3c5bd95e8e86de4de3
sha512: 963baa953c7fa4504194d561a4bbd3429e1df2d025cb3bf42ff85dd8b9511ae4778c73eecc91d43f5ebafaade592a6b18a5ea650f65ba21960d95bfd31671278
ssdeep: 1536:kRYpHXbpdF1XJfHM3S0DamJtLeW0bFyLvauPk0DRipYaEdmLt43mRpZN:aY3dFNJPmDamJ9TCWNrcpaCpZN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12393D06768D05EB7D5AB05B011B16B76F37BCDC402959AB70FB47F392A301868D0538E
sha3_384: 7606ea8e5549f6e07afed3bf7294b3e8b59501ffb5cd78084e7ba0060bcefe4f6a7d6805c9f2985b8a580dc08d510388
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-02-21 19:46:39

Version Info:
0: [No Data]

NSIS/TrojanDownloader.Grinidou.H also known as:

How to remove NSIS/TrojanDownloader.Grinidou.H?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.