Win32/Small.NOM removal instruction

The Win32/Small.NOM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Small.NOM virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

How to determine Win32/Small.NOM?


File Info:
crc32: 1EE5CA1A
md5: a9823e598473835c52202fbe54ad0511
name: A9823E598473835C52202FBE54AD0511.mlw
sha1: a74ab3c28a637df9f4a2ef83fa08653d41100923
sha256: 3b6159e42395cacde2a2fba21b3340388174195a3f926cbe031fcb785a44fffa
sha512: e493e41fbb1d0cfdd8a56a96c21e14cdd8777b1c954c3b55d294dd96311d3bfc9f106e2f758292c29a87f4ba9df0f495c84b5b1eef4591a5928a4c59fbdcb715
ssdeep: 384:gmjHIuT99VdV+Cvisnnj/13tn2HmA4rT1/WphiFW:giIuT999zLjnn2GfrZ/WLt
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x7248x6743x6240x6709 (C) 2017
InternalName: Client
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: Client x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: Client Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: Client.EXE
Translation: 0x0804 0x04b0

Win32/Small.NOM also known as:

K7AntiVirus	Trojan ( 0053a85c1 )
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 0053a85c1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Small.NOM
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Tencent	Win32.Trojan.Generic.Lnxq
Sophos	Mal/Generic-S
Comodo	Malware@#2z71ppspfc6zh
BitDefenderTheta	Gen:NN.ZexaCO.34170.cq0@aekwTpib
McAfee-GW-Edition	BehavesLike.Win32.BadFile.nt
FireEye	Generic.mg.a9823e598473835c
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Gen.Generic.C2658099
McAfee	Artemis!A9823E598473
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CJ121
Rising	Trojan.Generic@ML.80 (RDMK:abMw61iB4GfzQtpzcU7LFQ)
Yandex	Trojan.Small!EWEutH6FLtw
Ikarus	Trojan.Win32.Small
Fortinet	W32/Small.NOM!tr
AVG	Win32:Malware-gen

How to remove Win32/Small.NOM?

Win32/Small.NOM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X