Malware

Downloader.AdLoad removal instruction

Malware Removal

The Downloader.AdLoad is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Downloader.AdLoad virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Downloader.AdLoad?


File Info:

crc32: 8CE8ECA0
md5: 5c0613649a55e821ff5b4bbf839c301f
name: 5C0613649A55E821FF5B4BBF839C301F.mlw
sha1: d07470c6f772776dab84b81bf1b6300731be1bcb
sha256: 26fe675f467d57839ed8295ff00f6b7cf0b81d5d9adfae16d3f91914858e3a02
sha512: 2def3bd1a8cf3926be24f3b0a940ce6d9c3b5eda98ab922d3dcebc58f90233dc05c6c8590d774ae1dbd3719818fd7bc65e38aa39a2beae7e3d2d9681dcf13266
ssdeep: 12288:AAgqn4VzgjX8gZTR3O2eVVcJRAgqn4VzgjX8gZTR3O8:AAgqn4Vzo8gZTR3kkXAgqn4Vzo8gZTRR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0804 0x04b0
LegalCopyright: (C)2014 Shanghai Gaoxin Computer Systems Limited
InternalName: VStart6
FileVersion: 6.00.0002
CompanyName: Shanghai Gaoxin Computer Systems Limited
LegalTrademarks: (C)2014 Shanghai Gaoxin Computer Systems Limited
Comments: http://www.3LSoft.com
ProductName: VStart
ProductVersion: 6.00.0002
FileDescription: http://www.3LSoft.com
OriginalFilename: VStart6.exe

Downloader.AdLoad also known as:

DrWebAdware.Softcnapp.85
APEXMalicious
ClamAVWin.Dropper.LokiBot-9106831-0
MicrosoftPUA:Win32/CoinMiner
VBA32Downloader.AdLoad
AVGFileRepMetagen [PUP]

How to remove Downloader.AdLoad?

Downloader.AdLoad removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment