Trojan.NSIS.Cayu.epi removal tips

The Trojan.NSIS.Cayu.epi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.NSIS.Cayu.epi virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.NSIS.Cayu.epi?


File Info:
crc32: 72C0E18A
md5: c63294b4f6d907f4116e60bf28ea936d
name: C63294B4F6D907F4116E60BF28EA936D.mlw
sha1: 203007a18a99212219641e8aba1de42fb6a4f8d6
sha256: 3171f69400093f7117167a991807f54966b88199bb7bc57f80fbcf07ccdc5d56
sha512: 78d5b79d862f893fb7b0f684eeaf3cb1384c1acb0fe00fc705d42c5fde75b74fd5a38c8e92e298c8fda5d2de16b6f82d6a94ab2ae4c1112132bc70ca90a5fce9
ssdeep: 12288:0RtFMzSGcWAhil4IrkCX2dVDOhWMm+UYD2/fgErRk40sJJyyRck1a2c15:4FMzSGZj4WkGAD3y2PrF/JJNRckQ/j
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: (C) 2016 Oracle
InternalName: VBoxWindowsAdditions-x86.exe
FileVersion: VBox 5.0.1.0
CompanyName: Oracle
ProductName: VBox Guest Additions
ProductVersion: 5.0.1.0
FileDescription: VBox Guest Additions
Translation: 0x040c 0x04e4

Trojan.NSIS.Cayu.epi also known as:

K7AntiVirus	Trojan ( 0055e4081 )
Lionic	Trojan.NSIS.Cayu.4!c
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.2019
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Trojan:Win32/Injector.d4b0e96b
K7GW	Trojan ( 0055e4081 )
Cybereason	malicious.4f6d90
Symantec	Ransom.Cerber
ESET-NOD32	NSIS/Injector.HC
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.NSIS.Cayu.epi
BitDefender	Gen:Variant.Ransom.2019
NANO-Antivirus	Trojan.Win32.Cayu.ezhwjk
MicroWorld-eScan	Gen:Variant.Ransom.2019
Tencent	Win32.Trojan.Inject.Swuc
Ad-Aware	Gen:Variant.Ransom.2019
Sophos	Mal/Generic-R + Mal/Miuref-L
Comodo	Malware@#36be7voy41pl2
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_NSISRansom.SM001
McAfee-GW-Edition	BehavesLike.Win32.ObfusRansom.bc
FireEye	Gen:Variant.Ransom.2019
Emsisoft	Gen:Variant.Ransom.2019 (B)
Avira	HEUR/AGEN.1102533
Kingsoft	Win32.Troj.Inject.(kcloud)
Microsoft	Trojan:Win32/Occamy.B
Arcabit	Trojan.Ransom.D7E3
SUPERAntiSpyware	Ransom.Locky/Variant
GData	Gen:Variant.Ransom.2019
AhnLab-V3	Trojan/Win32.Locky.C1613392
McAfee	Artemis!C63294B4F6D9
MAX	malware (ai score=96)
VBA32	Trojan.Cayu
Malwarebytes	Ransom.Cerber
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_NSISRansom.SM001
Fortinet	W32/Injector.HC!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan.NSIS.Cayu.epi?

Trojan.NSIS.Cayu.epi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X