Packed.NSPack

Packed.NSPack is considered Malicious Software, and can further be classified as a Potentially Dangerous Tool, which in turn can further be classified as a Spyware application.

A Potentially Dangerous Tool is an application that is not harmful in its design, the only time this type of tool will become a PC threat is if deployed by unauthorized parties, for potentially malicious intent.

Packed.NSPack is affiliated with the following aliases:
- hldasvc.exe
- hmonitor.exe
- xdict.exe

Packed.NSPack is further given the classification as a low risk application, which generally speaking should do no harm to a computer system, unless installed without the knowledge or permission from the system’s user.

Being a low risk program, Packed.NSPack may track online habits - as provided for in a privacy policy or End User License Agreement (EULA) - or may display advertising within the applications themselves, these programs have only vague, minimal or negligible effects on the system’s privacy.

It has been claimed that if Packed.NSPack allows for the unauthorized access to an infected PC, then Packed.NSPack will then have capability to spread over a network exploiting various Windows vulnerabilities.

Packed.NSPack may come bundled with other malware and ensure that they are executed each time Windows starts. A malicious Trojan horse or Bot may represent a higher security risk for the compromised system and/or its network environment.

Accordingly, Packed.NSPack may be considered a malicious backdoor Trojan infection that runs in the background and allows remote access to the compromised system.

Packed.NSPack has been seen to display the following behavior:

* The Process is packed and/or encrypted using a software packing process
* Executes a Process
* Enables an In Process Object/Server - Common with DLL Injections
* Writes to another Process\'s Virtual Memory (Process Hijacking)
* Terminates Processes
* Registers a Dynamic Link Library File
* Enables a COM Object/Server on the Local Machine
* Adds products to the system registry
* This Process uses Anti Disassembly Tricks to avoid analysis by security products * The Process is polymorphic and can change its structure
* This Process Contains User Mode Rootkit Functionality and can hide itself from the running process list
* Makes outbound connections to other computers using NETBIOSOUT protocols

The best thing to do to rid any computer system of the presence of Packed.NSPack and all its components, would be to employ the services of a fully functional and up to date, not to mention legitimate antispyware tool.