Trojan-Dropper.NSIS.Agent information

The Trojan-Dropper.NSIS.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Dropper.NSIS.Agent virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Detected script timer window indicative of sleep style evasion
A process attempted to delay the analysis task.
Reads data out of its own binary image
A process created a hidden window
A scripting utility was executed
Uses Windows utilities for basic functionality
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Dropper.NSIS.Agent?


File Info:
crc32: A0B457A4
md5: 811d0418e7584d8fb4ccf7e1d7b5df4e
name: signed_2020-06-03_03-46.exe
sha1: 277a659372324b1a41759624f287ddbae82ba163
sha256: 7bbe759f946624a478cec3e40769636a20f1a577379658c27889f731ce80f446
sha512: 6b46b3f750442f43a1150fe7cdf8a5dd62a27851886b26280d564616e6b9e21930c44e58046ce244f380f33b1135309fb359f14f23e03142d3a53bd04121cda1
ssdeep: 49152:eP6GCmf+PjQFD2dZpTSNatZhf8PYuSdRY1oJ27Q63VUvbz1y:3mQMF6c8Zh6YFd6oARVGxy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: all rights reserved
FileVersion: 4.9.0.9
CompanyName: Kyo-Tux-Delikate-Close may
LegalTrademarks: Kyo-Tux-Delikate-Close company all rights
Comments: Kyo-Tux-Delikate-Close may
ProductName: Kyo-Tux-Delikate-Close
Translation: 0x0409 0x04e4

Trojan-Dropper.NSIS.Agent also known as:

Bkav	HW32.Packed.
McAfee	Artemis!811D0418E758
Cylance	Unsafe
AegisLab	Trojan.NSIS.Agent.b!c
Sangfor	Malware
Paloalto	generic.ml
ClamAV	Win.Malware.Score-6931191-0
Kaspersky	HEUR:Trojan-Dropper.NSIS.Agent.gen
F-Secure	Heuristic.HEUR/AGEN.1110754
McAfee-GW-Edition	Artemis!Trojan
APEX	Malicious
Avira	HEUR/AGEN.1110754
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Win32.Alien.gen
Microsoft	Trojan:Win32/Wacatac.C!ml
Cynet	Malicious (score: 85)
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Trojan.Dropper.e13

How to remove Trojan-Dropper.NSIS.Agent?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Dropper.NSIS.Agent information