Trojan:Win32/NSISInject.AO!MTB removal tips

The Trojan:Win32/NSISInject.AO!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/NSISInject.AO!MTB virus can do?

Authenticode signature is invalid

How to determine Trojan:Win32/NSISInject.AO!MTB?


File Info:
name: 16435074E53A26DE2F82.mlw
path: /opt/CAPEv2/storage/binaries/49a431e7a6cd114a1ec8116408054c83619204cc3e0cddc3d393c2017be0e175
crc32: B37C74D2
md5: 16435074e53a26de2f822b132f258b35
sha1: 340c3dc1369b1cbda3cb6e197576e9483c507245
sha256: 49a431e7a6cd114a1ec8116408054c83619204cc3e0cddc3d393c2017be0e175
sha512: d91c19f6bfd698d83c13a07bc4f8a14e3fa9af378ca18c9d14f0b871187160c6b448c1fa01e6a9ef18d9fdfe09e8affd2b92a0b1bd54b5264ccadd32785adfba
ssdeep: 768:Zww4LeEnsjJ3Td2RSGVLlxz+sq3uh/mvJKqaU4uJRU00OTJ9lIVlJPF:ZwDdnsFRCSuLlxz+t3QmIqEuLjJ9Cp
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12D536D117C40D833D44654754868D3A2AE3EBA322AB545C3BB951FFEAF312D1A63A34F
sha3_384: f18855e4ea83d433d67afc2d45ab54d7f0289dcdb02f6613534ceb759d6f89748bf30a4bbeb250c4831ad6018e90bbcd
ep_bytes: e896390000e9a5feffff8bff558bec56
timestamp: 2022-12-28 23:41:13

Version Info:
0: [No Data]

Trojan:Win32/NSISInject.AO!MTB also known as:

MicroWorld-eScan	Gen:Variant.Zusy.446122
FireEye	Gen:Variant.Zusy.446122
CAT-QuickHeal	Trojan.GenericPMF.S29416267
McAfee	Agent-FWP!16435074E53A
VIPRE	Gen:Variant.Zusy.446122
K7GW	Trojan ( 0059d0d31 )
K7AntiVirus	Trojan ( 0059d0d31 )
Cyren	W32/Injector.AJWZ-8400
Symantec	Packed.Generic.683
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.ESMK
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Zusy.446122
NANO-Antivirus	Trojan.Win32.Inject.jueilk
Avast	Win32:InjectorX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bdba98
Zillya	Trojan.Injector.Win32.1610308
TrendMicro	TROJ_GEN.R011C0DC723
McAfee-GW-Edition	Agent-FWP!16435074E53A
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Zusy.446122 (B)
Ikarus	Trojan.Agent
GData	Gen:Variant.Zusy.446122
Jiangmin	Trojan.Agent.elkt
Avira	TR/Injector.vzrbj
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Zusy.D6CEAA
ZoneAlarm	HEUR:Trojan.Win32.Agent.gen
Microsoft	Trojan:Win32/NSISInject.AO!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R547105
ALYac	Gen:Variant.Zusy.446122
MAX	malware (ai score=87)
Rising	Trojan.Injector!8.C4 (TFE:5:P4PtBNn4It)
Fortinet	W32/ShellcodeRunner.CA!tr
AVG	Win32:InjectorX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Trojan:Win32/NSISInject.AO!MTB?

Trojan:Win32/NSISInject.AO!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X