Categories: Trojan

NSIS/TrojanDownloader.Adload.CF removal instruction

The NSIS/TrojanDownloader.Adload.CF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What NSIS/TrojanDownloader.Adload.CF virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Attempts to connect to a dead IP:Port (5 unique times)
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Behavior consistent with a dropper attempting to download the next stage.
Network activity contains more than one unique useragent.
Anomalous binary characteristics

Related domains:

lose.scarffriction.men

win.shipcows.party

www.installengine.com

resources.flexera.com

apps.identrust.com

How to determine NSIS/TrojanDownloader.Adload.CF?


File Info:
crc32: 119284F7md5: f8b2830d60f90b63651ea175f19870dename: F8B2830D60F90B63651EA175F19870DE.mlwsha1: 042b053213fb6bfef638c6bf70db48f8c2d7650csha256: 1a31743ee2830c034b29521fdc4a1ec2ea8f9ec1733a1ffbf7a9d98197172752sha512: 09aecd43e9b133d0eb218b26f7a732661db8737bb560a02fd25fd6e27dce912cb8ace1fef74c1fce17df13055e73f580eec19c7b334f5a3dfd45862f44288333ssdeep: 98304:oqntiaXIfbsXD+9U3b5cfBaeNDvY7sbZcQM3HTYz752mZ0/ajcLuH:oqnJz0ychN2sbZJAHTyx0/a7Htype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

NSIS/TrojanDownloader.Adload.CF also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan-Downloader ( 0055e3ed1 )
Lionic	Trojan.NSIS.Adload.a!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Vittalia.7648
ClamAV	Win.Trojan.Agent-6567461-0
McAfee	Artemis!F8B2830D60F9
Cylance	Unsafe
Sangfor	Trojan.Win32.Skeeyah.1
K7GW	Trojan-Downloader ( 0055e3ed1 )
Cybereason	malicious.d60f90
Cyren	W32/NSIS_Adload.A.gen!Camelot
Symantec	PUA.Downloader
ESET-NOD32	NSIS/TrojanDownloader.Adload.CF
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Downloader.NSIS.Adload.bx
BitDefender	Gen:Application.Downloader.InstallMonster.3.085@xZ@bidjMkli
NANO-Antivirus	Riskware.Nsis.Vittalia.eaeqpo
MicroWorld-eScan	Gen:Application.Downloader.InstallMonster.3.085@xZ@bidjMkli
Tencent	Nsis.Trojan-downloader.Adload.Efkk
Ad-Aware	Gen:Application.Downloader.InstallMonster.3.085@xZ@bidjMkli
Sophos	Mal/Generic-S
Comodo	ApplicUnwnt@#23pp9nklnopxe
F-Secure	Trojan.TR/Adload.Gen
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.AdwareAdload.rc
FireEye	Gen:Application.Downloader.InstallMonster.3.085@xZ@bidjMkli
Emsisoft	Gen:Application.Downloader.InstallMonster.3.085@xZ@bidjMkli (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Adload.Gen
Antiy-AVL	Trojan/Generic.ASMalwNS.31BD
Microsoft	TrojanDownloader:Win32/Adload.DV!bit
GData	NSIS.Adware.Adload.AD
AhnLab-V3	PUP/Win32.Agent.C902432
VBA32	suspected of Trojan.Downloader.gen
MAX	malware (ai score=96)
Malwarebytes	Adware.IStartSurf
Panda	Trj/CI.A
Rising	Downloader.Agent/NSIS!1.B1BD (CLASSIC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Adload.CF!tr.dldr
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml