Categories: Trojan

How to remove “Trojan.NSIS.Agent.EO”?

The Trojan.NSIS.Agent.EO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.NSIS.Agent.EO virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the BuerLoader malware family
Attempts to modify proxy settings
Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.NSIS.Agent.EO?


File Info:
name: 19CA9BF5EEBC9E2F0BD3.mlwpath: /opt/CAPEv2/storage/binaries/f2a883a0e4b01c72b0f063df3be5a0102e5c8fbaedc39c8d35c632b200599283crc32: 3CEC0DD8md5: 19ca9bf5eebc9e2f0bd3230f262348fdsha1: e8157d7e277ccf04de3476c1845cd597c112786esha256: f2a883a0e4b01c72b0f063df3be5a0102e5c8fbaedc39c8d35c632b200599283sha512: 636859bd44528e75e5c6c25ad4fce12e0482fdd0de3798c863efbf4326e77db184b1354fc5433672239dee4350a0fc12427acc9a4bedfd17487e96ee5e397d72ssdeep: 3072:pomnzVincQDKgcxXgnQiQlo4SssssIkHY/a4ojbNUvP7HSun:ptZtXgnQiKo4+YQKrSMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17F54A13863F0A752D075423147E2C5346AE15F28DEE1C30BE2B42E19BB56ED93D8A64Fsha3_384: 51b875d0371cf8be08d5599a075a551a6b1f24ef7e38913193aedd144c459662c3e987a4721047d51fdad488f7da2f21ep_bytes: 81ec8401000053565733db6801800000timestamp: 2019-12-16 00:50:56
Version Info:
Comments: This installation was built with Inno Setup.CompanyName: ByteScout Software                                          FileDescription: ByteScout XLS Viewer Setup                                  FileVersion: 4.0.0.1910          LegalCopyright:                                                                                                     ProductName: ByteScout XLS Viewer                                        ProductVersion: 4.0.0.1910                                        Translation: 0x0000 0x04b0

Trojan.NSIS.Agent.EO also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Makop.j!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.NSIS.Agent.EO
ClamAV	Win.Malware.Injects-9838571-0
FireEye	Trojan.NSIS.Agent.EO
Skyhigh	Generic trojan.mk
McAfee	Artemis!19CA9BF5EEBC
Cylance	unsafe
Zillya	Dropper.Agent.Win32.534290
Sangfor	Trojan.Win32.Injector.Vps9
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/BazarLoader.600c77cd
K7GW	Trojan ( 00578a4a1 )
K7AntiVirus	Trojan ( 00578a4a1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	NSIS/Injector.AKO
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Ransom.Win32.Makop.gen
BitDefender	Trojan.NSIS.Agent.EO
Avast	Win32:NSISDropper-B [Drp]
Tencent	Win32.Trojan-Ransom.Makop.Kcnw
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1337954
VIPRE	Trojan.NSIS.Agent.EO
TrendMicro	Trojan.Win32.BUERLOADER.THCOCBA
Emsisoft	Trojan.NSIS.Agent.EO (B)
Ikarus	Trojan.NSIS.Agent
GData	Trojan.NSIS.Agent.EO
Jiangmin	Trojan.Injects.tn
Webroot	W32.Trojan.Gen
Varist	W32/ABTrojan.SKOP-6846
Avira	HEUR/AGEN.1337954
Antiy-AVL	Trojan/NSIS.Injector
Kingsoft	malware.kb.a.972
Xcitium	Malware@#3bh7z8dn3rq4o
Arcabit	Trojan.NSIS.Agent.EO
ViRobot	Trojan.Win32.Z.Wacatac.287953
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Makop.gen
Microsoft	Trojan:Win32/BazarLoader!MSR
Google	Detected
AhnLab-V3	Trojan/Win32.Ransomlock.C4357549
ALYac	Trojan.BuerLoader
MAX	malware (ai score=84)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
TrendMicro-HouseCall	Trojan.Win32.BUERLOADER.THCOCBA
Rising	Trojan.Injector/NSIS!1.BFBB (CLASSIC)
Fortinet	NSIS/Injector.777B!tr.ransom
AVG	Win32:NSISDropper-B [Drp]
DeepInstinct	MALICIOUS