Categories: Risk

RiskTool.NSIS.Agent.kl information

The RiskTool.NSIS.Agent.kl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskTool.NSIS.Agent.kl virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine RiskTool.NSIS.Agent.kl?


File Info:
name: 3D26A4C19E5CF9B4B6C8.mlwpath: /opt/CAPEv2/storage/binaries/e1cbd2c2f6fdc4d9ab829009f273a478921c84a2c113827c52c751ef7608fbe6crc32: 2F046DE4md5: 3d26a4c19e5cf9b4b6c8b7b53e4c5eabsha1: 29231631535e383681904c3c682503a81fb6be17sha256: e1cbd2c2f6fdc4d9ab829009f273a478921c84a2c113827c52c751ef7608fbe6sha512: 6d36cb1401098b2e9807b9569e583d0402eb0e776d987c08092e4a839fa88927bbee2689d67114a51a9d631ddab99f97803d10308dba06efa1284ade22206d99ssdeep: 3072:eQIURTXJFGOHru3/sDvHZBsrLSXLTH2velgyjUbyrCRen6lHfYDKUyPAPBFC:esXtHrMiu5velgckpRen6lHoKJP4Bgtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1AA14022766D6C432D05249B219F3E7A3D3F3FB843608CF136B569FAA5521183A9217E3sha3_384: 258066d1cb80e1ab54caada585fe442b2f6b05b3a038671af1178a2dafce877dfb8da91fd09676203221998c48b8c08cep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-12-05 22:50:46
Version Info:
FileDescription: Producer shdFileVersion: LegalCopyright: (C)ProductName: Translation: 0x0804 0x04e4

RiskTool.NSIS.Agent.kl also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.NSIS.Agent.1!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.46475672
FireEye	Generic.mg.3d26a4c19e5cf9b4
McAfee	Artemis!3D26A4C19E5C
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Adware.BrowseFox.Win32.172898
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004af42c1 )
Alibaba	RiskWare:Win32/Ramnit.243eb52c
K7GW	Trojan ( 004af42c1 )
CrowdStrike	win/malicious_confidence_100% (W)
Baidu	NSIS.Trojan-Dropper.Agent.c
VirIT	Adware.Win32.Searcher.BVA
Cyren	W32/Dropper.DS.gen!Eldorado
Symantec	PUA.Gen.2
ESET-NOD32	a variant of NSIS/TrojanDropper.Agent.BT
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:RiskTool.NSIS.Agent.kl
BitDefender	Trojan.GenericKD.46475672
NANO-Antivirus	Riskware.Nsis.Searcher.dtckjn
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:Adware-gen [Adw]
Tencent	Nsis.Risktool.Agent.Nsmw
Emsisoft	Adware.Dropper (A)
F-Secure	Trojan.TR/Drop.Agent.tnvvz
DrWeb	Adware.Searcher.1222
VIPRE	Trojan.GenericKD.46475672
TrendMicro	TROJ_GEN.R002C0RGN23
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.cc
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Agent-AUG
GData	Trojan.GenericKD.46475672
Webroot	W32.Malware.Heur
Avira	TR/Drop.Agent.tnvvz
Arcabit	Trojan.Generic.D2C52998
ZoneAlarm	not-a-virus:RiskTool.NSIS.Agent.kl
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
ALYac	Trojan.GenericKD.46475672
MAX	malware (ai score=82)
VBA32	Adware.Searcher
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0RGN23
Ikarus	Win32.Ramnit
Fortinet	W32/Ramnit.DF18!tr
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.19e5cf
DeepInstinct	MALICIOUS