Trojan

How to remove “TrojanDownloader.NSIS.Hicrazy”?

Malware Removal

The TrojanDownloader.NSIS.Hicrazy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What TrojanDownloader.NSIS.Hicrazy virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine TrojanDownloader.NSIS.Hicrazy?



File Info:

name: 8C82196ACE584B7C5389.mlw
path: /opt/CAPEv2/storage/binaries/b014e8e71c6d97160fcc043b7e5efcfa24051356dfc06bbfab985deac89e1216
crc32: 49D7F9CA
md5: 8c82196ace584b7c5389c4eb263a8140
sha1: 18b36ce1b1171bf9a4ba54d07e868337bf710589
sha256: b014e8e71c6d97160fcc043b7e5efcfa24051356dfc06bbfab985deac89e1216
sha512: 275e0c0038d0015cb2d9dff79e6566026003dd921e99ef461c1a157cc26c255a78c4c11063fa3ac69e526ea7ebc705e99ff164a3935a04969bbd1c2171714b51
ssdeep: 24576:UwaEnUB2IQH4w0gCHYpezBtvwJdoVmAJ4gQXH0Ne50jiGb5KUJXMMh6OI:MtP4V30NeRUJcMh6OI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13025BC1165A0E5A7EBEC62B080295BED8E7F2D600253530B2AF3BDDDBEA5F5F02505C1
sha3_384: 90bfadc077f203d9e9e0525654a4cfbe3082e08094bb55432223a55cc09a1d8e8b27ff643dcb4494267f6b3026c720ce
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-02-21 19:46:39


Version Info:

Comments: http://en.zjcg.org
CompanyName: MeinV
FileDescription: Installer Application
FileVersion: 1.0.0.0
LegalCopyright: Corporation. All rights reserved.
ProductName: 绿豆浏览器
ProductVersion: 1.0.0.0
Translation: 0x0000 0x03a8

TrojanDownloader.NSIS.Hicrazy also known as:

MicroWorld-eScanTrojan.Downloader.Hicrazyk.A
FireEyeTrojan.Downloader.Hicrazyk.A
CAT-QuickHealTrojanDownloader.NSIS.Hicrazy
SkyhighBehavesLike.Win32.Generic.dc
McAfeeArtemis!8C82196ACE58
Cylanceunsafe
ZillyaDownloader.Chindo.Win32.650
SangforDownloader.NSIS.Hicrazyk.V6wr
K7AntiVirusTrojan-Downloader ( 0055e3ed1 )
AlibabaTrojanDownloader:Win32/Hicrazyk.ebbde7c6
K7GWTrojan-Downloader ( 0055e3ed1 )
CrowdStrikewin/malicious_confidence_90% (W)
ArcabitTrojan.Downloader.Hicrazyk.A
BitDefenderThetaGen:NN.ZevbaF.36802.em0@amgzXwmb
VirITTrojan.Win32.SHeur4.ALHH
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32NSIS/TrojanDownloader.Grinidou.F
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0DBK24
ClamAVWin.Trojan.Hicrazyk-12
KasperskyHEUR:Trojan-Downloader.NSIS.Chindo.gen
BitDefenderTrojan.Downloader.Hicrazyk.A
NANO-AntivirusTrojan.Win32.Dwn.hkuqvr
AvastNSIS:Downloader-AAW [Adw]
TencentNsis.Trojan-Downloader.Ader.Yolw
EmsisoftTrojan.Downloader.Hicrazyk.A (B)
BaiduNSIS.Trojan-Downloader.Grinidou.a
DrWebTrojan.DownLoader12.11907
VIPRETrojan.Downloader.Hicrazyk.A
TrendMicroTROJ_GEN.R002C0DBK24
SophosTroj/StartP-HV
SentinelOneStatic AI – Suspicious PE
GoogleDetected
VaristW32/Chindo.S.gen!Eldorado
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.793
XcitiumMalware@#38x3mh9sopl92
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmHEUR:Trojan-Downloader.NSIS.Chindo.gen
GDataTrojan.Downloader.Hicrazyk.A
VBA32TrojanDownloader.Chindo
ALYacTrojan.Downloader.Hicrazyk.A
MAXmalware (ai score=100)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/CI.A
YandexTrojan.GenAsa!uT17gTe93w0
IkarusTrojan.SuspectCRC
FortinetW32/StartPage.NY!tr
AVGNSIS:Downloader-AAW [Adw]
DeepInstinctMALICIOUS
alibabacloudTrojan[downloader]:Win/Chindo.gen

How to remove TrojanDownloader.NSIS.Hicrazy?

TrojanDownloader.NSIS.Hicrazy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment