Home Malware Programs Potentially Unwanted Programs (PUPs) NSBlock

NSBlock

Posted: March 23, 2017

Threat Metric

Ranking: 3,663
Threat Level: 1/10
Infected PCs: 18,943
First Seen: March 23, 2017
Last Seen: October 17, 2023
OS(es) Affected: Windows

NSBlock is a Potentially Unwanted Program (PUP) that claims to provide users with protection from spyware, phishing, or other potentially harmful websites that they may encounter while browsing the Web. The extension does this by displaying a notification and halting the connection to the website that the user is trying to visit temporarily if it turns out that the page in question is suspicious. While these actions may certainly seem helpful, users who wish to stay safe online should keep in mind that there are more reliable and reputable tools that offer this protection. Furthermore, the NSBlock software also may establish some suspicious connections to remote hosts that might be associated with advertising activities. This means that, at some point, NSBlock may become the reason for the presence of unwanted ads in the user's Web browser. It also is possible that NSBlock may load these ads in a background process silently, therefore hiding this activity from the user.

The 'Terms & Conditions' of NSBlock also reveal some interesting things such as that the publisher notes that the extension may offer customers the ability to install 3rd-party search services and extensions in the future. While this can only happen with the user's consent, it is important to note that reputable software of this sort may not promote 3rd-party software that may often end up being untrustworthy.

If you are not bothered by NSBlock's weird behavior, then you may keep on using this application. However, if you did not install NSBlock on purpose or if you think that you should find a better alternative to this software, then we advise you to remove NSBlock as soon as possible. The NSBlock software may be removed manually via the Windows Control Panel or with the help of credible computer security software.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



NSBlock.exe File name: NSBlock.exe
Size: 1.5 MB (1508352 bytes)
MD5: b89e0e454f90401cb122baa540cd7c1d
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: April 25, 2020

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\System32\ns.block%WINDIR%\System32\NSBlockA.dll%WINDIR%\System32\NSBlockB.dllHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\AppID\{1C6F51F8-BCE6-4702-8952-6A8233359FBC}SOFTWARE\WOW6432Node\Classes\AppID\{1C6F51F8-BCE6-4702-8952-6A8233359FBC}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{e512339c-40d8-42ea-9749-c8ddb8cf39d2}

Additional Information

The following directories were created:
%PROGRAMFILES%\NSBlock%PROGRAMFILES(x86)%\NSBlock

Related Posts

Loading...