Malware

Win32/Small.NIE removal instruction

Malware Removal

The Win32/Small.NIE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Small.NIE virus can do?

  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Small.NIE?


File Info:

crc32: DDCDCA66
md5: 9fc47578a6c7fa5a974ef86f8ed5a21c
name: 9FC47578A6C7FA5A974EF86F8ED5A21C.mlw
sha1: ffc7bca7a625354cffa93a23c897b9ee8a6163fd
sha256: 22e6ba875570c3b57a5e170a3a88000d354aa03bbfcb3fbc3f13f92c8fd2485e
sha512: 26c9cb97beceb4fd444293426a59c69bfe7604f28f256a5aa99f600f7db58704006b9b7a7d3ee112a936398c5429004823b8e083fc30454128e7421fc8a4b527
ssdeep: 48:6CYQdQmZmsZphFjTA6BB9tyiZqgzp/La9+wDW+bQg31:nUmgelr1t5ZX/YPJX1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Small.NIE also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Starter.1480
CynetMalicious (score: 100)
ALYacGen:Variant.Ulise.23277
CylanceUnsafe
BitDefenderGen:Variant.Ulise.23277
Cybereasonmalicious.8a6c7f
ESET-NOD32a variant of Win32/Small.NIE
APEXMalicious
ClamAVWin.Trojan.Xblocker-2
KasperskyVHO:Trojan-PSW.Win32.Ruftar.gen
NANO-AntivirusTrojan.Win32.XBlocker.cprmd
ViRobotTrojan.Win32.Ransom.5632.A
MicroWorld-eScanGen:Variant.Ulise.23277
Ad-AwareGen:Variant.Ulise.23277
ComodoTrojWare.Win32.Ransom.XBlocker.A@2a393l
F-SecureHeuristic.HEUR/AGEN.1106801
BitDefenderThetaGen:NN.ZexaF.34722.aqX@a0P17jhi
McAfee-GW-EditionGenericRXAI-FM!9FC47578A6C7
FireEyeGeneric.mg.9fc47578a6c7fa5a
EmsisoftGen:Variant.Ulise.23277 (B)
JiangminTrojan/XBlocker.vn
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1106801
Antiy-AVLTrojan/Win32.Agent.uxaz
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Ulise.D5AED
ZoneAlarmnot-a-virus:HEUR:RiskTool.Script.BitMiner.gen
GDataGen:Variant.Ulise.23277
McAfeeGenericRXAI-FM!9FC47578A6C7
MAXmalware (ai score=84)
VBA32Trojan.Qhost
TrendMicro-HouseCallTROJ_RANSOM_000001d.TOMA
RisingMalware.Heuristic!ET#99% (RDMK:cmRtazptGo6mSYC55fFxiiNQlgDS)
YandexTrojan.GenAsa!pk/WK0+MRpk
IkarusTrojan-Ransom.XBlocker
FortinetW32/Generic.AC.32B5F!tr

How to remove Win32/Small.NIE?

Win32/Small.NIE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment