Trojan

How to remove “NSIS/TrojanDownloader.Adload.BZ”?

Malware Removal

The NSIS/TrojanDownloader.Adload.BZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What NSIS/TrojanDownloader.Adload.BZ virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Authenticode signature is invalid

Related domains:

pe-ento.com
pe-kli.com
pe-err.com
wpad.local-net

How to determine NSIS/TrojanDownloader.Adload.BZ?


File Info:

name: 9D80BE30B8EEDDCFA0BE.mlw
path: /opt/CAPEv2/storage/binaries/0e7188715b8dd74876aff0d40a054d378cfbe2bcba3b4f8a4d34fd1edb40a4dc
crc32: BD6066E6
md5: 9d80be30b8eeddcfa0be7e211e316024
sha1: 84cd9452cd2be1babaa109532783248149ef0338
sha256: 0e7188715b8dd74876aff0d40a054d378cfbe2bcba3b4f8a4d34fd1edb40a4dc
sha512: c8e94f5f0e9e9195ec5e54edd927106faaa77214d6296163c146ab4e344bd23776010cca0c739f8ddd206be8dbdc5f65182b29b5c60f8c17b37d5e35795ee780
ssdeep: 24576:69Y23O2VJFgp4KsFXNPU2PQnv+2hfXEmOSGfXh1xo:L23O0Jip43FXS4e22hfXHGvrxo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1532523D6BEE808B5DBF20C76ACB450AB866AED165812C10D73D694DF3D12D42CF1836B
sha3_384: b3aacb82a9bc7b2fea8d6ead82913190f9b036eafbca593620c217748abb35f2f7e85f9be4cd481294a86324b2366db1
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2012-02-24 19:20:04

Version Info:

0: [No Data]

NSIS/TrojanDownloader.Adload.BZ also known as:

BkavW32.AIDetect.malware1
LionicTrojan.NSIS.Agent.a!c
MicroWorld-eScanGen:Application.Downloader.InstallMonster.2.0849yZ@byvOqKoi
FireEyeGeneric.mg.9d80be30b8eeddcf
ALYacGen:Application.Downloader.InstallMonster.2.0849yZ@byvOqKoi
K7AntiVirusTrojan-Downloader ( 004f31921 )
AlibabaMalware:Win32/km_2e81741.None
K7GWTrojan-Downloader ( 004f31921 )
Cybereasonmalicious.0b8eed
CyrenW32/A-0da5deac!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32NSIS/TrojanDownloader.Adload.BZ
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Downloader.NSIS.Agent.gen
BitDefenderGen:Application.Downloader.InstallMonster.2.0849yZ@byvOqKoi
NANO-AntivirusTrojan.Nsis.Downloader.gjetoh
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
AvastFileRepMalware
Ad-AwareGen:Application.Downloader.InstallMonster.2.0849yZ@byvOqKoi
SophosGeneric ML PUA (PUA)
DrWebTrojan.DownLoader27.22074
EmsisoftGen:Application.Downloader.InstallMonster.2.0849yZ@byvOqKoi (B)
GDataNSIS.Trojan-Downloader.Adload.K
AviraTR/Dldr.Adload.gsiah
MAXmalware (ai score=75)
Antiy-AVLTrojan/Generic.ASMalwNS.7A
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
McAfeeRDN/Generic Downloader.x
VBA32AdWare.AdLoad
MalwarebytesTrojan.AdLoad
TrendMicro-HouseCallTROJ_GEN.R002H0DKO21
TencentNsis.Trojan-downloader.Adload.Hwmi
SentinelOneStatic AI – Malicious PE
FortinetRiskware/Adload
AVGFileRepMalware

How to remove NSIS/TrojanDownloader.Adload.BZ?

NSIS/TrojanDownloader.Adload.BZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment