NSIS:Loderka-AU [PUP] (file analysis)

The NSIS:Loderka-AU [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS:Loderka-AU [PUP] virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine NSIS:Loderka-AU [PUP]?

File Info:
name: 700466AA49B24B3561A1.mlw
path: /opt/CAPEv2/storage/binaries/5dc846dad3f02f8f2e4f8699fbd64287ee3245476c022d3aba887006c3f53f94
crc32: 1C1C094E
md5: 700466aa49b24b3561a10053ac0d5d1a
sha1: e8852a209de668d6bf155183bfe4251c8188386a
sha256: 5dc846dad3f02f8f2e4f8699fbd64287ee3245476c022d3aba887006c3f53f94
sha512: a46e8d186ef3605340f5d6564e31f6b89fa5395102971c1fb020b0466d9e2e925ca1ca4cbfe7d926554625a462aac8e8ab3406c4a08b79baa73d2e870872a140
ssdeep: 49152:2q7Klu85Zet85plj4NhWpvHo9rXsrR5qnFdY:u04E8nd4N8pv2WR5SFm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T101A52343FB934C32E8BD1E34CD56806D9D2778AC29D6209E1CFCC94F25B829D297AD61
sha3_384: da9341f966274fe29e12141f3cd7812468e7b87149f6dc49b90ee609d7296391d6e8e6d73086e58967179a6f998d38d7
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-10-02 05:04:04

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Treyarch                                                    
FileDescription: Setup For Call of Duty Black Ops 2                          
FileVersion: 1.0.0               
LegalCopyright: © Treyarch                                                                                          
ProductName: Call of Duty Black Ops 2                                    
ProductVersion: 14.10.2020          
Translation: 0x0000 0x04b0

NSIS:Loderka-AU [PUP] also known as:

How to remove NSIS:Loderka-AU [PUP]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.