Should I remove “NSIS:Loderka-AU [PUP]”?

The NSIS:Loderka-AU [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS:Loderka-AU [PUP] virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine NSIS:Loderka-AU [PUP]?

File Info:
name: 77BF3C768614AD90B281.mlw
path: /opt/CAPEv2/storage/binaries/650cd3722f176aed29eb80d172bd8ac4a8e4eadf4308c8e609f35f78cecab349
crc32: 2F145BB9
md5: 77bf3c768614ad90b28174b6cfc7407e
sha1: 098894828675725cfbe277ae92e4dd9ead700f0e
sha256: 650cd3722f176aed29eb80d172bd8ac4a8e4eadf4308c8e609f35f78cecab349
sha512: 9b79703f8b27cb65a97aff2d99d0f111a51a38e24215c17c5af807bee9aabd9f525ce32e8a84464517446f4459abe80a69136257ad324f6fd82fab1b3f1306c8
ssdeep: 49152:3wf8C9ym+pHL+0n3Uplj4NhW4vHo9feA6PiL0If56vrd:Ar9KpHX3od4N84v2P6P8fQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15D952307F3C350B6E9651A7CD51984849C5FB8B82EE2A4596CF8C64F1ABD3C12C3EA71
sha3_384: a41eb06ebc92191ee422b51e1b52c10773cdf926fea2105e89fa93fea539699b17f91d98d2e20db9a9e0bcc6262e344e
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-10-02 05:04:04

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: EA                                                          
FileDescription: Setup For Need for Speed Most Wanted                        
FileVersion: 1.0.0               
LegalCopyright: © EA                                                                                                
ProductName: Need for Speed Most Wanted                                  
ProductVersion: 1.3                 
Translation: 0x0000 0x04b0

NSIS:Loderka-AU [PUP] also known as:

How to remove NSIS:Loderka-AU [PUP]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.