Adware

Adware.AdLoad.NSIS malicious file

Malware Removal

The Adware.AdLoad.NSIS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.AdLoad.NSIS virus can do?

  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

bun.warspade.bid
trump.warcup.bid

How to determine Adware.AdLoad.NSIS?


File Info:

crc32: 518882ED
md5: f927ce1723f3d3f31fc8469d711969cc
name: F927CE1723F3D3F31FC8469D711969CC.mlw
sha1: 80185034ee606f0e674d11f64c9335c97180b950
sha256: dd6176900f526418583fc484882d34c5ad5cce3020429bded2b6c3baf929c99e
sha512: 8d002c1bad60764d493d183b1be77c9d21b2ac529ddbe5fa23d0f35888cf9251887aa4715ffa8dc3181d261f3aca6deaf933e578b0f6a19ff915ba4c1095ea78
ssdeep: 1536:+pgpHzb9dZVX9fHMvG0D3XJBFnh2nBqVW4/FtyZuaJX9TFQ:EgXdZt9P6D3XJBdVW4NtyZuINJQ
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Adware.AdLoad.NSIS also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
FireEyeGeneric.mg.f927ce1723f3d3f3
Qihoo-360Win32/Trojan.Downloader.f1e
McAfeeArtemis!F927CE1723F3
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.95444
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusTrojan-Downloader ( 005239b01 )
BitDefenderGen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
K7GWTrojan-Downloader ( 005239b01 )
Cybereasonmalicious.723f3d
CyrenW32/AdLoad.DJ.gen!Eldorado
ESET-NOD32NSIS/TrojanDownloader.Adload.R
APEXMalicious
AvastWin32:Downloader-WHL [Trj]
KasperskyHEUR:Trojan-Downloader.NSIS.Agent.gen
AlibabaTrojanDownloader:Win32/Adload.9e64697f
NANO-AntivirusTrojan.Nsis.Adload.etdhkj
RisingTrojan.NSIS/Adload!1.B2CD (CLASSIC)
Ad-AwareGen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
EmsisoftGen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi (B)
F-SecureHeuristic.HEUR/AGEN.1111209
DrWebTrojan.Siggen6.51460
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.AdwareAdload.mm
SophosMal/Generic-S
IkarusTrojan-Downloader.NSIS.Adload
AviraHEUR/AGEN.1111209
Antiy-AVLGrayWare[Downloader]/Win32.Adload.gen
MicrosoftTrojanDownloader:Win32/Adload.DX!bit
GridinsoftAdware.Win32.Downloader.oa
ArcabitApplication.Downloader.InstallMonster.2.E72C2C
AhnLab-V3PUP/Win32.AdLoad.R223334
ZoneAlarmHEUR:Trojan-Downloader.NSIS.Agent.gen
GDataNSIS.Adware.Adload.AD
CynetMalicious (score: 100)
Acronissuspicious
VBA32TrojanDownloader.Agent
ALYacGen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
MAXmalware (ai score=96)
MalwarebytesAdware.AdLoad.NSIS
PandaTrj/CI.A
TencentNsis.Trojan-downloader.Adload.Ecjv
SentinelOneStatic AI – Malicious PE – Downloader
eGambitUnsafe.AI_Score_85%
FortinetPossibleThreat
AVGWin32:Downloader-WHL [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)

How to remove Adware.AdLoad.NSIS?

Adware.AdLoad.NSIS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment