Malware

Win32/Tiny.NCS (file analysis)

Malware Removal

The Win32/Tiny.NCS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Tiny.NCS virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Anomalous binary characteristics

How to determine Win32/Tiny.NCS?


File Info:

crc32: 26C01156
md5: 4043d984d38edb4ff774a746b37459a0
name: 4043D984D38EDB4FF774A746B37459A0.mlw
sha1: baf796a881594fe0a59b271db5226076368ac51a
sha256: 5ed3d09ce2c54e3f1d0b3ea3697569dbc7c9cee54ac06263c3621bcc0028cec6
sha512: 3bf552b2cb42619bca906a5fa2c7b50455672dae72f3002f771ca68632ddd1e37f8f64843d887e8734c7456afd0cfa246bfb495a4e52e5b78475ff8bbaff8ccd
ssdeep: 48:ZvtyxdHJ8Y6YWTN/epQMs3TD1aW6mghHjakgg7RV:Z1yxdHJDaNm5W65lnB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Tiny.NCS also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0052f6f21 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.326834
CylanceUnsafe
ZillyaTrojan.Tiny.Win32.5248
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0052f6f21 )
Cybereasonmalicious.4d38ed
CyrenW32/S-c98bd6a4!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Tiny.NCS
ZonerTrojan.Win32.84716
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
BitDefenderGen:Variant.Zusy.326834
NANO-AntivirusTrojan.Win32.Tiny.fazbsn
MicroWorld-eScanGen:Variant.Zusy.326834
TencentWin32.Trojan.Generic.Ozhz
Ad-AwareGen:Variant.Zusy.326834
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanDownloader.Tiny.VB@83w9cn
BitDefenderThetaGen:NN.ZexaF.34236.aiX@aeP1Jjp
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.xz
FireEyeGeneric.mg.4043d984d38edb4f
EmsisoftGen:Variant.Zusy.326834 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.ccshi
AviraHEUR/AGEN.1118628
Antiy-AVLTrojan/Generic.ASMalwS.264FC21
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Variant.Zusy.326834
TACHYONTrojan/W32.Agent.4096.TY
AhnLab-V3Malware/Win32.Generic.C2488674
Acronissuspicious
McAfeeGenericRXFF-HR!4043D984D38E
MAXmalware (ai score=99)
VBA32Malware-Cryptor.General.3
MalwarebytesTrojan.Agent.UKN.Generic
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.100 (RDML:W0trGrAP9wD0/gbI+NIzHg)
YandexTrojan.GenAsa!y8Ow5pFchAE
IkarusTrojan.Win32.Tiny
FortinetW32/Tiny.NCS!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Win32/Tiny.NCS?

Win32/Tiny.NCS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment