Should I remove “Trojan.NSIS.Ransom.AQ”?

The Trojan.NSIS.Ransom.AQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.NSIS.Ransom.AQ virus can do?

• Presents an Authenticode digital signature
• Creates RWX memory
• Reads data out of its own binary image
• A process created a hidden window
• Unconventionial binary language: Portuguese (Brazil)
• Unconventionial language used in binary resources: Portuguese (Brazilian)
• Installs itself for autorun at Windows startup
• Exhibits possible ransomware file modification behavior
• Creates a hidden or system file
• Network activity detected but not expressed in API logs
• Likely virus infection of existing system binary
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Trojan.NSIS.Ransom.AQ?

File Info:
crc32: 54B4B86E
md5: 36324c10202f2c395e29007afc17a0c5
name: 36324C10202F2C395E29007AFC17A0C5.mlw
sha1: ef628a3713d9e3e62af9685aeb8cac2f6dae532a
sha256: 46e00958d58f176ba6c328d357b2283b4db5a0f4f8009f9279361c8018925449
sha512: 6aee767175c29b49af629001f54753341ffb2555523f156e65ce48c1192705fc08f350fd15023527947afa8b24130f1e0c360b5886eb259b6cac1226e78e08a8
ssdeep: 3072:X030XCIscLlj+ck45L8UQtYMQFpJU6EjhxFpPv5f3uPGwrKX3ZGC:Xje2jQCMQLJ56xrX5GPjoX
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: Copyright 2014 SoftwareOfUse, Inc.
FileVersion: 7.3.2
CompanyName: SoftwareOfUse, Inc.
Comments: http://www.SoftwareOfUse.com
ProductName: Network Configurator
ProductVersion: 7.3.2
FileDescription: Network Configurator
Translation: 0x0416 0x04e4

Trojan.NSIS.Ransom.AQ also known as:

How to remove Trojan.NSIS.Ransom.AQ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.