Categories: AdwarePUA

What is “NSIS:Adware-IA [PUP]”?

The NSIS:Adware-IA [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS:Adware-IA [PUP] virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
A process attempted to delay the analysis task by a long amount of time.
Anomalous binary characteristics

Related domains:

www.fcvenkaeast.us

How to determine NSIS:Adware-IA [PUP]?


File Info:
crc32: C3DA4C55md5: b2e92ebeed7321883cfa98b1663e904cname: B2E92EBEED7321883CFA98B1663E904C.mlwsha1: a3fc1c6d1a0ef8bf2a7f58ac811fd59533707177sha256: 84537e216314d10f6e6f49fb3956341ed085cc03740e43503df1e1af56d67c60sha512: 1ef8ca317be0dcf90a5ec0dec625a25dcc2e1e84e68587dded7d27050c962ef7735043111772bef7bdcecfafebaebf7fd7b38209a7770a52e3c122ca4f7ac1f8ssdeep: 24576:lWMesKXPC9vKiWmbCv1DOLyhMsLcLcNl7J8gM1aluXSR95z:l7esyPCImIMLOcLcNl7JHPZ95ztype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

NSIS:Adware-IA [PUP] also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop4.22250
Cynet	Malicious (score: 100)
CAT-QuickHeal	PUA.NSIS.InstallMonetizer.A
Zillya	Trojan.Onion.Win32.1962
Sangfor	Adware.Win32.Lolliport.mt
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	AdWare:Win32/InstallMonetizer.9a231d97
Cybereason	malicious.d1a0ef
Symantec	PUA.SearchProtect
ESET-NOD32	multiple detections
APEX	Malicious
Avast	NSIS:Adware-IA [PUP]
NANO-Antivirus	Trojan.Win32.Drop.cspele
Sophos	Generic PUA KD (PUA)
VIPRE	InstallMonetizer (fs)
TrendMicro	TROJ_GEN.R067C0PFB21
McAfee-GW-Edition	BehavesLike.Win32.Ransom.tc
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1124362
Antiy-AVL	Trojan/Generic.ASMalwNS.2973
Microsoft	SoftwareBundler:Win32/Lolliport
AegisLab	Trojan.Win32.Malicious.4!c
GData	NSIS.Adware.SysTweak.N (3x)
McAfee	Artemis!B2E92EBEED73
VBA32	Trojan.MulDrop
Malwarebytes	Malware.AI.618308278
TrendMicro-HouseCall	TROJ_GEN.R067C0PFB21
AVG	NSIS:Adware-IA [PUP]
Paloalto	generic.ml