Categories: Adware

Adware.AdLoad.NSIS malicious file

The Adware.AdLoad.NSIS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.AdLoad.NSIS virus can do?

  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

bun.warspade.bid
trump.warcup.bid

How to determine Adware.AdLoad.NSIS?


File Info:

crc32: 518882EDmd5: f927ce1723f3d3f31fc8469d711969ccname: F927CE1723F3D3F31FC8469D711969CC.mlwsha1: 80185034ee606f0e674d11f64c9335c97180b950sha256: dd6176900f526418583fc484882d34c5ad5cce3020429bded2b6c3baf929c99esha512: 8d002c1bad60764d493d183b1be77c9d21b2ac529ddbe5fa23d0f35888cf9251887aa4715ffa8dc3181d261f3aca6deaf933e578b0f6a19ff915ba4c1095ea78ssdeep: 1536:+pgpHzb9dZVX9fHMvG0D3XJBFnh2nBqVW4/FtyZuaJX9TFQ:EgXdZt9P6D3XJBdVW4NtyZuINJQtype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Adware.AdLoad.NSIS also known as:

Elastic malicious (high confidence)
MicroWorld-eScan Gen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
FireEye Generic.mg.f927ce1723f3d3f3
Qihoo-360 Win32/Trojan.Downloader.f1e
McAfee Artemis!F927CE1723F3
Cylance Unsafe
Zillya Trojan.GenericKD.Win32.95444
AegisLab Trojan.Win32.Generic.4!c
Sangfor Malware
K7AntiVirus Trojan-Downloader ( 005239b01 )
BitDefender Gen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
K7GW Trojan-Downloader ( 005239b01 )
Cybereason malicious.723f3d
Cyren W32/AdLoad.DJ.gen!Eldorado
ESET-NOD32 NSIS/TrojanDownloader.Adload.R
APEX Malicious
Avast Win32:Downloader-WHL [Trj]
Kaspersky HEUR:Trojan-Downloader.NSIS.Agent.gen
Alibaba TrojanDownloader:Win32/Adload.9e64697f
NANO-Antivirus Trojan.Nsis.Adload.etdhkj
Rising Trojan.NSIS/Adload!1.B2CD (CLASSIC)
Ad-Aware Gen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
Emsisoft Gen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi (B)
F-Secure Heuristic.HEUR/AGEN.1111209
DrWeb Trojan.Siggen6.51460
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition BehavesLike.Win32.AdwareAdload.mm
Sophos Mal/Generic-S
Ikarus Trojan-Downloader.NSIS.Adload
Avira HEUR/AGEN.1111209
Antiy-AVL GrayWare[Downloader]/Win32.Adload.gen
Microsoft TrojanDownloader:Win32/Adload.DX!bit
Gridinsoft Adware.Win32.Downloader.oa
Arcabit Application.Downloader.InstallMonster.2.E72C2C
AhnLab-V3 PUP/Win32.AdLoad.R223334
ZoneAlarm HEUR:Trojan-Downloader.NSIS.Agent.gen
GData NSIS.Adware.Adload.AD
Cynet Malicious (score: 100)
Acronis suspicious
VBA32 TrojanDownloader.Agent
ALYac Gen:Application.Downloader.InstallMonster.2.084fuZ@biwUN1hi
MAX malware (ai score=96)
Malwarebytes Adware.AdLoad.NSIS
Panda Trj/CI.A
Tencent Nsis.Trojan-downloader.Adload.Ecjv
SentinelOne Static AI – Malicious PE – Downloader
eGambit Unsafe.AI_Score_85%
Fortinet PossibleThreat
AVG Win32:Downloader-WHL [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_80% (D)

How to remove Adware.AdLoad.NSIS?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Trojan.Generic.35601204 removal

The Trojan.Generic.35601204 is considered dangerous by lots of security experts. When this infection is active,…

23 mins ago

AIT:Trojan.Nymeria.6000 information

The AIT:Trojan.Nymeria.6000 is considered dangerous by lots of security experts. When this infection is active,…

30 mins ago

MSILHeracles.68689 (B) removal instruction

The MSILHeracles.68689 (B) is considered dangerous by lots of security experts. When this infection is…

34 mins ago

Zusy.547004 removal guide

The Zusy.547004 is considered dangerous by lots of security experts. When this infection is active,…

34 mins ago

Trojan.Win32.Agent.xbnasm removal guide

The Trojan.Win32.Agent.xbnasm is considered dangerous by lots of security experts. When this infection is active,…

39 mins ago

Zusy.541701 malicious file

The Zusy.541701 is considered dangerous by lots of security experts. When this infection is active,…

54 mins ago