Avira Virus Lab


  • Name
  • Date discovered
    Oct 6, 2015
  • Type
  • Impact
  • Reported Infections
  • Operating System
  • VDF version (2015-06-14 08:31)

Stay safe from all these threats with Avira Free Antivirus.

Avira Free Antivirus Download Free

This class of detection flags software that display ads, usually in the Internet browser by modifying displayed pages or opening additional pages with ads. These adware programs are usually installed by the users themselves or come with other software that the users install themselves (usually in exchange for using the software for free or as a default install option). Users might be unaware that this software was installed or of its behavior. This detection is meant to flag the file and the behavior as part of legitimate ad-displaying software. This detection can be disabled and is recommended if the user is aware of the software installed on his/her system and doesn't want this type of software to be detected.

  • VDF (2015-06-14 08:31)
  • Files
    The following files are deleted:
    • %TEMPDIR%\nsi4E.tmp
    • %TEMPDIR%\nsy50.tmp
    • %TEMPDIR%\nso52.tmp
    • %TEMPDIR%\nso52.tmp\ping
    • %DISKDRIVE%\xxx
    The following files are created:
    • %TEMPDIR%\nsi4E.tmp
    • %TEMPDIR%\nsi4F.tmp
    • %TEMPDIR%\nsy50.tmp
    • %TEMPDIR%\nsy51.tmp
    • %TEMPDIR%\nso52.tmp
    • %TEMPDIR%\nso52.tmp\UserInfo.dll
    • %TEMPDIR%\nso52.tmp\System.dll
    • %TEMPDIR%\nso52.tmp\NSISdl.dll
    • %TEMPDIR%\nso52.tmp\ping
    • %TEMPDIR%\nso52.tmp\BrowserExtensionsSetupUAC.exe
    The following copies of itself are created:
    • %TEMPDIR%\~nsu.tmp\Au_.exe
  • Registry
    The values of the following registry keys are removed:
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run (Slick Savings: -; Browser Extensions: -)

Help make the web safer by sending us suspicious files/URLs to analyze

Submit your file/URL or Go to support.avira.com

Why submit a suspicious file?

If you encountered a suspicious file or website that’s not in our database, we’ll analyze it and determine whether it’s harmful. Our findings are then pushed out to our millions of users with their next virus database update. If you have Avira, you’ll get that update too. Don’t have Avira? Get it on our homepage.