Win32/Packed.NSISmod.BD.Gen suspicious information

The Win32/Packed.NSISmod.BD.Gen suspicious is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Packed.NSISmod.BD.Gen suspicious virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid

How to determine Win32/Packed.NSISmod.BD.Gen suspicious?

File Info:
name: CFE2128E213F23BF3BC7.mlw
path: /opt/CAPEv2/storage/binaries/64a8e303a693771c63f2bca0dbbb337f7b497999484a67d228a66c159c6ce84d
crc32: 6BE92A77
md5: cfe2128e213f23bf3bc73d08cf243b7b
sha1: 635c4fbb93698d974f842f8be3ebad56c687e6fa
sha256: 64a8e303a693771c63f2bca0dbbb337f7b497999484a67d228a66c159c6ce84d
sha512: 42d7a0d4662efef18c4d322cec40d2bfafffc9de37afd32f440391514b58c4b8a93d2822024c2cee1fa3254eb389309f6f6f598960704cf2fc644cd557098d31
ssdeep: 3072:qweqOYEUXPn7lcODikrg7Ynet2O4vBnQloOh3SBDDIm0Nrw7hVCcsDxli:3EUXzlcOWUcYO4ZnQlphwDImercsDK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B04BF4852B080BBFEFC0EF17E3255422FFAB8125069D14BAB12F68E3839551975DB1B
sha3_384: e7a7d9a03c6ef655a64641b2591c18a506b6fe24b856d4c8acce8f8653ba40813cdbdb15eb9ae116b76b10cfc462b478
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2012-02-24 19:19:59

Version Info:
Comments: A build of the Portable by TryRooM Launcher
CompanyName: Macrorit Inc.
FileDescription: Macrorit Partition Expert Portable
FileVersion: 5.7.0.0
InternalName: Portable by TryRooM Launcher
LegalCopyright: Portable by TryRooM
LegalTrademarks: 2013-2021 Macrorit
OriginalFilename: MDiskPartitionExpertPortable.exe
PrivateBuild: Copyright Portable by TryRooM
ProductName: Macrorit Partition Expert
ProductVersion: 5.7.0.0
SpecialBuild: Portable TryRooM
Translation: 0x0000 0x03b5

Win32/Packed.NSISmod.BD.Gen suspicious also known as:

How to remove Win32/Packed.NSISmod.BD.Gen suspicious?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.