Win32/Packed.Autoit.NBD suspicious removal instruction

The Win32/Packed.Autoit.NBD suspicious is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Packed.Autoit.NBD suspicious virus can do?

Drops a binary and executes it
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

redirector.gvt1.com

r5—sn-4g5e6nl6.gvt1.com

How to determine Win32/Packed.Autoit.NBD suspicious?


File Info:
crc32: 9B3050F0
md5: 92f1bef21b28fb418033c73622252d39
name: setup_c.exe
sha1: e0a1e8c7249e7f7ed992e41561593fb381f4f072
sha256: 01827d567443050f058ed97297b49b2c3a74d55357fd4b690f41519b31eb5eec
sha512: a5bdb4de1d3b636d8e65535b556453ad7961bc764fbc886c43e5c16c4b7e5e5dae9730805da177482e755e32799de2e18087116d3b419f19f4dadf80a43dc1ea
ssdeep: 49152:Ykjrl341O1jzsAUBGOmjpZlWperMznjgB:Ykj+cpNj5Wp+MLjO
type: MS-DOS executable, MZ for MS-DOS

Version Info:
FileVersion: 7.4.4.7
ProductVersion: 7.4.4.7
Translation: 0x0809 0x04b0

Win32/Packed.Autoit.NBD suspicious also known as:

FireEye	Generic.mg.92f1bef21b28fb41
McAfee	GenericRXIX-KX!92F1BEF21B28
Cylance	Unsafe
Sangfor	Malware
Cybereason	malicious.7249e7
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.32515.NnuaaWcmEZci
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
McAfee-GW-Edition	BehavesLike.Win32.SoftPulse.tc
Trapmine	malicious.high.ml.score
CMC	Virus.Win32.Sality!O
Ikarus	Trojan.Win32.Autoit
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Wacatac.B!ml
Acronis	suspicious
VBA32	Trojan.Occamy
Malwarebytes	Trojan.Qulab
ESET-NOD32	a variant of Win32/Packed.Autoit.NBD suspicious
SentinelOne	DFI – Malicious PE
Fortinet	AutoIt/Packed.KY!tr
AVG	FileRepMetagen [Malware]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Win32/Packed.Autoit.NBD suspicious?

Win32/Packed.Autoit.NBD suspicious removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Packed.Autoit.NBD suspicious removal instruction