Categories: Adware

NSIS:Adware-ACJ [Adw] removal tips

The NSIS:Adware-ACJ [Adw] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS:Adware-ACJ [Adw] virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine NSIS:Adware-ACJ [Adw]?


File Info:
name: A791F66A44FD8DFC8FB2.mlwpath: /opt/CAPEv2/storage/binaries/035e1158df108ea78baad520015411fb63d0bd2790144b342127a422361d1232crc32: 32BC6D9Cmd5: a791f66a44fd8dfc8fb2339c080643e7sha1: aa3e12bbdd756a431ca7e250daa74925522f7d05sha256: 035e1158df108ea78baad520015411fb63d0bd2790144b342127a422361d1232sha512: 1112fa680f1fbaac8afe156ba29ee1c1aa5e42e398f9b97af6458eb996a9efa98947ed0abb3186c024bc39b997723f41bef446adcf8434c83a8365957c797f58ssdeep: 12288:a0ghQNllpVolM7HteUMxmFug3xNuRZY/aHUAWgCA8FVq2s:VG+/o0oD0xERZY/aUA7r2stype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FEB423027EA080FFF6960E3129B1E6A298ABFD405935D62F52948FCDBE70541CC79793sha3_384: 696958d8045250cb765413c75999ad22991639f7fa3687891792288520282f6bd2874a6e00c84cf04f8a8f26c3015aa8ep_bytes: 81ecd4020000535556576a2033ed5e89timestamp: 2012-02-24 19:20:04
Version Info:
Comments: CompanyName: UitrowEsla GrapperFileDescription: UitrowEsla GrapperLegalCopyright: UitrowEsla GrapperProductName: UitrowEsla GrapperTranslation: 0x0000 0x04b0

NSIS:Adware-ACJ [Adw] also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Dropped:Trojan.GenericKD.3609294
FireEye	Generic.mg.a791f66a44fd8dfc
McAfee	Artemis!A791F66A44FD
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Suspicious.Win32.Ursu.20271
Alibaba	AdWare:Win32/ScreenShotter.ccc9d4e6
Cybereason	malicious.a44fd8
Cyren	W32/S-29c6804b!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Paloalto	generic.ml
Kaspersky	not-a-virus:AdWare.Win32.ICLoader.aszn
BitDefender	Dropped:Trojan.GenericKD.3609294
NANO-Antivirus	Trojan.Win32.StartPage1.ehctpr
Avast	NSIS:Adware-ACJ [Adw]
Rising	Trojan.Generic@ML.100 (RDML:IEEMaJY5SQOjHStOisAfuA)
Ad-Aware	Dropped:Trojan.GenericKD.3609294
Sophos	Generic PUA KK (PUA)
Comodo	ApplicUnwnt@#8bm1yqaxe37w
DrWeb	Trojan.StartPage1.30514
Zillya	Adware.ICLoader.Win32.16936
McAfee-GW-Edition	BehavesLike.Win32.SearchSuite.gc
Emsisoft	Dropped:Trojan.GenericKD.3609294 (B)
Ikarus	Trojan.Razy
GData	Dropped:Trojan.GenericKD.3609294
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1122476
Antiy-AVL	Trojan/Generic.ASMalwS.23AEBC3
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.ICLoader.R188572
VBA32	Trojan.StartPage
ALYac	Dropped:Trojan.GenericKD.3609294
MAX	malware (ai score=100)
Malwarebytes	Adware.HPDefender
TrendMicro-HouseCall	TROJ_GEN.R002H0CKM21
Tencent	Win32.Adware.Icloader.Lnnt
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Malware
BitDefenderTheta	Gen:NN.ZexaE.34294.fy0@aSU0ujei
AVG	NSIS:Adware-ACJ [Adw]
Panda	PUP/Generic
CrowdStrike	win/malicious_confidence_100% (D)