PUP.Optional.QualityChecker.NSIS removal

The PUP.Optional.QualityChecker.NSIS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.QualityChecker.NSIS virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine PUP.Optional.QualityChecker.NSIS?


File Info:
name: C85E2B910F4E07C00733.mlw
path: /opt/CAPEv2/storage/binaries/c13d6e637cae3e15efb82a809b5317cb7e2f664b1b4e3204af6ce48a13dee4d5
crc32: 8D731BB0
md5: c85e2b910f4e07c0073368597f4f1332
sha1: ddebbbe39f30c8d9a096c3e7432ac9154d1b5bd8
sha256: c13d6e637cae3e15efb82a809b5317cb7e2f664b1b4e3204af6ce48a13dee4d5
sha512: 59621b28dd06ec48c6a910c39b68a5fef2c7fe0ff0385a52e48f1febe711798420d171118712dc8615dbf707b85b5383a7628dd197fc3af680993571da75862a
ssdeep: 3072:IgXdZt9P6D3XJL45TCGO9o4sVRDWBneiEQLjC27KYSAsO9o4sB:Ie34RITksRD6jrTcka
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F2E3010376C5E9B7EDD7223057B7E7BDE7FA960C160223438B692F6F2E014809C1A195
sha3_384: e4fed9ff22011c13a35b922b55b9772a75be9855d2d6466aa1abb381288d1c9f8c78b68a4286122331dabee95f7fa276
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
0: [No Data]

PUP.Optional.QualityChecker.NSIS also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (moderate confidence)
FireEye	Generic.mg.c85e2b910f4e07c0
McAfee	Artemis!C85E2B910F4E
Zillya	Adware.Vopak.Win32.4019
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Proxy-Program ( 0055e3ff1 )
K7GW	Proxy-Program ( 0055e3ff1 )
CrowdStrike	win/grayware_confidence_90% (W)
VirIT	Trojan.Win32.DownLoader18.CKSP
ESET-NOD32	multiple detections
APEX	Malicious
NANO-Antivirus	Trojan.Win32.TrjGen.eefncx
Avast	Win32:Malware-gen
Comodo	Malware@#ijmy5gat4w2n
DrWeb	Trojan.DownLoader18.42395
TrendMicro	TROJ_GEN.R002C0DEQ22
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
GData	Win32.Trojan.Agent.JR9DXG
Google	Detected
Antiy-AVL	Trojan/Generic.ASMalwS.3C54
Microsoft	Program:Win32/Wacapew.C!ml
BitDefenderTheta	Gen:NN.ZexaF.34646.fuW@aSPTyuci
VBA32	Trojan.Skeeyah
Malwarebytes	PUP.Optional.QualityChecker.NSIS
TrendMicro-HouseCall	TROJ_GEN.R002C0DEQ22
Ikarus	Trojan-Proxy.Agent
Fortinet	W32/Agent.NZV!tr
AVG	Win32:Malware-gen
Cybereason	malicious.39f30c

How to remove PUP.Optional.QualityChecker.NSIS?

PUP.Optional.QualityChecker.NSIS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X