PUA

NSIS:Loderka-AU [PUP] removal tips

Malware Removal

The NSIS:Loderka-AU [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What NSIS:Loderka-AU [PUP] virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine NSIS:Loderka-AU [PUP]?


File Info:

name: BB083D14C187A49E4C51.mlw
path: /opt/CAPEv2/storage/binaries/3b196560d9600e75df2565b02af32a8e23a7bacbccfa5d182e54ce6f08b1e1a0
crc32: D0E8A11D
md5: bb083d14c187a49e4c512b822b4e9b17
sha1: 2f0be63cae9170760284273297eb29e1afb630cf
sha256: 3b196560d9600e75df2565b02af32a8e23a7bacbccfa5d182e54ce6f08b1e1a0
sha512: cb497794c771f1f5d000626543419f712238db0d393f76606ce4e011600286fc61399ff8674ea084213bfb727d482ef049a310048d8473f6d2a85b4184ab30f9
ssdeep: 49152:lm69gy9rwtdecY1LEvplj4NhWiFvHo9nEtKXkwtpnQ8JvLt:GQup4+d4N8wv2nyKX7tplJvR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C6A5126AE3824577D5285538C461D4B4AD227C746AE3A4363CF8FEAF353A3420C7A93D
sha3_384: 9671f00ee38482a3029f60c15fc6aa48f132aeee79d8b1ab75a47c1aab17316b2e58a9beda998840256106a76e299e1e
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-10-02 05:04:04

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: Bohemia Interactive
FileDescription: Setup For Arma 3
FileVersion: 1.0.0
LegalCopyright: © Bohemia Interactive
ProductName: Arma 3
ProductVersion: 2.02.14
Translation: 0x0000 0x04b0

NSIS:Loderka-AU [PUP] also known as:

BkavW32.AIDetectMalware
CynetMalicious (score: 100)
SangforPUP.Win32.Agent.Vml2
CrowdStrikewin/grayware_confidence_60% (W)
ESET-NOD32multiple detections
AvastNSIS:Loderka-AU [PUP]
DrWebAdware.Downware.20346
GDataWin32.Application.Agent.YAXUOM
GoogleDetected
MalwarebytesGeneric.Malware/Suspicious
YandexTrojan.Igent.bXIK5m.1
IkarusPUA.INNO.RePack
FortinetRiskware/NDAoF
AVGNSIS:Loderka-AU [PUP]
DeepInstinctMALICIOUS

How to remove NSIS:Loderka-AU [PUP]?

NSIS:Loderka-AU [PUP] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment