Malware

What is “Downloader.19”?

Malware Removal

The Downloader.19 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Downloader.19 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes executed files from disk

How to determine Downloader.19?



File Info:

name: 0838A7DE348971CCE11D.mlw
path: /opt/CAPEv2/storage/binaries/9cbd743e2ed3670a20090b2b01e3eda4e89a81463a964a187b99e7cb0deb4326
crc32: FC19055D
md5: 0838a7de348971cce11da0d7911b97ee
sha1: 757e4815f43b5d75a5e01f8109de272f36821f53
sha256: 9cbd743e2ed3670a20090b2b01e3eda4e89a81463a964a187b99e7cb0deb4326
sha512: 0986826d6827fcf29f408c3b2c461e93deb658b0a1205c277d0b7cfe68a23d871589fdb494aea108df1d22c765d00cd59954ac195b5fd8719a86917503cd5802
ssdeep: 768:eoeC6ZEIFQi3tnHeKpGzm2Wq87TxkIkdg:eoeFDFHtHKzmW4eImg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C3F2AE2D5E57485BF1928AB4D3A605C25FFDAC233AEBA83FCF44414524D118CA4E2EF6
sha3_384: d746f5dd8ad294cb2068e4e3d2066f972014c01367744b216436737d5f260e72f6e801fa3a9a5d5b4b40baf6f14ef8f4
ep_bytes: 558bec81ec380300005356576a4033db
timestamp: 2010-08-09 01:44:42


Version Info:

CompanyName: Adobe Systems, Inc.
FileDescription: Adobe? Flash? Player Installer/Uninstaller 10.1 r53
FileVersion: 10,1,53,64
InternalName: Adobe? Flash? Player Installer/Uninstaller 10.1
LegalCopyright: Copyright ? 1996-2010 Adobe, Inc.
LegalTrademarks: Adobe? Flash? Player
OriginalFilename: FlashUtil.exe
ProductName: Flash? Player Installer/Uninstaller
ProductVersion: 10,1,53,64
Translation: 0x0409 0x04b0

Downloader.19 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Downloader.19
ClamAVWin.Trojan.Ulise-6838227-0
FireEyeGeneric.mg.0838a7de348971cc
CAT-QuickHealTrojan.Mauvaise.SL1
SkyhighBehavesLike.Win32.Generic.nm
McAfeeDownloader-BIJ.a
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.MianchaGen.Win32.2
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0040f54b1 )
K7GWTrojan ( 0053a0a21 )
Cybereasonmalicious.5f43b5
BitDefenderThetaGen:NN.ZexaF.36744.cq0@a0LUH!ci
SymantecTrojan.Cryect
Elasticmalicious (high confidence)
ESET-NOD32Win32/Injector.BFSU
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Miancha.gen
BitDefenderGen:Variant.Downloader.19
NANO-AntivirusTrojan.Win32.Small.cpbmb
SUPERAntiSpywareBackdoor.Bot/Variant
AvastWin32:KeyIso-A [Trj]
TencentTrojan.Win32.Miancha.za
TACHYONTrojan/W32.Agent.36864.BSC
EmsisoftGen:Variant.Downloader.19 (B)
BaiduWin32.Trojan.Inject.bm
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.DownLoad2.15318
VIPREGen:Variant.Downloader.19
TrendMicroBKDR_SIMBOT.SMJB
Trapminemalicious.high.ml.score
SophosTroj/DwnLdr-MDK
IkarusTrojan-Downloader.Win32.Small
GDataWin32.Trojan.PSE1.13MYFBD
JiangminTrojanDownloader.Small.ajux
WebrootW32.Backdoor.Simbot
VaristW32/Rubin.A.gen!Eldorado
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Inject.aaceh
Kingsoftmalware.kb.a.1000
XcitiumBackdoor.Win32.Simbot.FTSP@5j7zlt
ArcabitTrojan.Downloader.19
ViRobotTrojan.Win32.Downloader.36864.PZ
ZoneAlarmHEUR:Trojan.Win32.Miancha.gen
MicrosoftTrojan:Win32/Injector.ARA!MTB
GoogleDetected
AhnLab-V3Backdoor/Win32.CSon.R885
Acronissuspicious
ALYacGen:Variant.Downloader.19
MAXmalware (ai score=83)
VBA32BScope.Trojan.Miancha
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallBKDR_SIMBOT.SMJB
RisingTrojan.Injector!1.A7C6 (CLASSIC)
YandexTrojan.GenAsa!G2T9Vhma1ds
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Inject.AACEH
FortinetW32/Injector.BFSU!tr
AVGWin32:KeyIso-A [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Downloader.19?

Downloader.19 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment