NSIS:Loderka-AU [PUP] removal instruction

The NSIS:Loderka-AU [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS:Loderka-AU [PUP] virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine NSIS:Loderka-AU [PUP]?

File Info:
name: DCCA9441B20EFFBB31DE.mlw
path: /opt/CAPEv2/storage/binaries/cd8efdaaa2fedd85de520ceb60e6d6b23dbd0d1b84dcfb30eb0ff1825c2f6cfe
crc32: 082D7957
md5: dcca9441b20effbb31de091968a7481d
sha1: f748c67ac61cede3df2f9bf4bab4b05d97fbb1a1
sha256: cd8efdaaa2fedd85de520ceb60e6d6b23dbd0d1b84dcfb30eb0ff1825c2f6cfe
sha512: de9c2b388710776dccab810dd9c3f531f33a5f52933aa57fec118fa86b568b5c61c79a0bb63ca307a36fcee6c06e4d993b7ef93dca0e71aa1ef8f4e187d35d18
ssdeep: 49152:AYpRCSG3o7oo4FXRMS5Gplj4NhW2h4vHo9y848nb+Hi+96D/d8gHNkLf://G3e/4FvWd4N8k4v2y848bwriWLf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19AB52342B7C34472D46A167CCC5550A9AC27B8A929F2505E6DFDCA8F1DFC3C22C37AA4
sha3_384: be2ac551268c31d7a957dae816a7e8907fe06fb377e1071fa2e3f1ae5cd10c2c4713ba04a49addc2e8f4748a8a3d8ede
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-10-02 05:04:04

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Devolver Digital                                            
FileDescription: Setup For SCUM                                              
FileVersion: 1.0.0               
LegalCopyright: © Devolver Digital                                                                                  
ProductName: SCUM                                                        
ProductVersion: 0.7.10.493          
Translation: 0x0000 0x04b0

NSIS:Loderka-AU [PUP] also known as:

How to remove NSIS:Loderka-AU [PUP]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.