Malware

Win32/Tufik.NAD malicious file

Malware Removal

The Win32/Tufik.NAD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Tufik.NAD virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/Tufik.NAD?


File Info:

name: 8AE304C3A1080FCC9001.mlw
path: /opt/CAPEv2/storage/binaries/052c6f4242520fb5daff84fefa9ab57144d433d88600efb672c9e0a5ab620c56
crc32: 593202AC
md5: 8ae304c3a1080fcc90012158eda1dc2e
sha1: 0a7c9590aceec5d3851e051a9eef072528a9bd3b
sha256: 052c6f4242520fb5daff84fefa9ab57144d433d88600efb672c9e0a5ab620c56
sha512: cbc1b8a158014ab8603ea875d06d5e93e1a88641b0acac2aa0d035a0701f0d06c468d245c7c0fa514a46ba723ce6964069d27c5bf497f3a6e4672ed9e00d9a26
ssdeep: 49152:/IYnI8FdFOV2m6iIgOXvW/xbUjmdufzSo68blM:/IEb/FOVSiIgEQxbU6dLo6SlM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17295F12B6AE08D32C1AB1F745D176394A92D7E322AAFD85D7DF41D0C2F3C9813529287
sha3_384: 05a4c6b9d88598da166d78a233137a4101ad57242d194765bec563c091659f572d664a9a6d0c3aceb68f0a2e434fc25c
ep_bytes: 558bec83c4f053b8cc954600e8b7c5f9
timestamp: 2012-01-26 06:51:11

Version Info:

0: [No Data]

Win32/Tufik.NAD also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.BHO.4!c
DrWebTrojan.DownLoader.38462
McAfeeArtemis!8AE304C3A108
MalwarebytesTufik.Virus.FileInfector.DDS
ZillyaDropper.BHO.Win32.615
SangforWorm.Win32.Agent.zbr
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaTrojanDropper:Win32/Tufik.bbd872be
K7GWTrojan ( 003f9eb31 )
K7AntiVirusTrojan ( 003f9eb31 )
CyrenW32/Trojan.KKSU-9362
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Tufik.NAD
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Dropper.Win32.BHO.i
NANO-AntivirusTrojan.Win32.BHO.erkyek
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.BHO.aal
F-SecureTrojan.TR/Drop.Agent.crt.2
TrendMicroPE_TUFIK.H-O
McAfee-GW-EditionBehavesLike.Win32.Sality.tc
Trapminemalicious.high.ml.score
SophosMal/Packer
AviraTR/Drop.Agent.crt.2
MAXmalware (ai score=100)
Antiy-AVLTrojan[Dropper]/Win32.BHO
XcitiumMalware@#r4166ac61vss
ZoneAlarmTrojan-Dropper.Win32.BHO.i
MicrosoftBackdoor:Win32/Hupigon
GoogleDetected
VBA32BScope.TrojanDownloader.Agent
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallPE_TUFIK.H-O
RisingTrojan.Generic@AI.98 (RDML:yy98esyFNjt+yT+D7njfXA)
IkarusVirus.Win32.Tufik
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/BHO.I!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.0aceec
DeepInstinctMALICIOUS

How to remove Win32/Tufik.NAD?

Win32/Tufik.NAD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment