Trojan

Should I remove “Trojan-Downloader.Win32.Adload.spuk”?

Malware Removal

The Trojan-Downloader.Win32.Adload.spuk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Adload.spuk virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Adload.spuk?


File Info:

name: 1198DADA09BA4D75EC59.mlw
path: /opt/CAPEv2/storage/binaries/d5fbb0edb93f080a2facfe31ab07c8c3d8d833d5c5be9fe444e13b462051af7c
crc32: 9434BCD8
md5: 1198dada09ba4d75ec5977ac83ce14cf
sha1: a65194d9449136d6482c39ea7958fcc005399cd0
sha256: d5fbb0edb93f080a2facfe31ab07c8c3d8d833d5c5be9fe444e13b462051af7c
sha512: 21fc316e3274d234c49bc41bb67449be91bc27726231b84c7f54abecbd37bf1059741bb3e059c2de93947db6b962716242328e96c037206a712767c3e5b52162
ssdeep: 98304:8SivHFuBmeZZHrqpGU9/564G8Fm1BhctrfYWxSHTp2sCDnWDkP1I:iHK1DSR6Fx1B6rF4FCDcktI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15136123FB268A53ED4AB4B3205B38350987BB665B81B8C1E17F4490DCF674601E3FA56
sha3_384: c517cfed3436c3248e9f0747565f94bec4a4cfa82cfd96a268456ff21659e2abcb885d3e3e3ebf3160d8c34ee35fa125
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2020-11-15 09:48:30

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Nam Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: Nam
ProductVersion: 6.16.1.2
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.spuk also known as:

LionicTrojan.Win32.Ekstak.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeTrojan.GenericKD.46846928
McAfeeArtemis!1198DADA09BA
CylanceUnsafe
SangforTrojan.Win32.Adload.spuk
K7AntiVirusTrojan ( 005810941 )
K7GWTrojan ( 005810941 )
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/Agent.DAL.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Kryptik.HMIJ
Paloaltogeneric.ml
KasperskyTrojan-Downloader.Win32.Adload.spuk
BitDefenderTrojan.GenericKD.46846928
MicroWorld-eScanTrojan.GenericKD.46846928
AvastWin32:CrypterX-gen [Trj]
TencentWin32.Trojan-downloader.Adload.Dwtk
Ad-AwareTrojan.GenericKD.46846928
EmsisoftTrojan.GenericKD.46846928 (B)
TrendMicroTROJ_GEN.R06CC0RHM21
McAfee-GW-EditionBehavesLike.Win32.CSDImonetize.rc
SophosTroj/Agent-BHKP
GDataWin32.Trojan.BSE.W4BXSV
AviraHEUR/AGEN.1142027
GridinsoftRansom.Win32.Wacatac.sa
ViRobotTrojan.Win32.Z.Sabsik.4904839
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacTrojan.GenericKD.46846928
MAXmalware (ai score=89)
VBA32Trojan.Ekstak
MalwarebytesAdware.DownloadAssistant
TrendMicro-HouseCallTROJ_GEN.R06CC0RHM21
RisingDownloader.Convagent!8.123D1 (TFE:1:MNyDoagYG0P)
YandexTrojan.DL.Adload!wlDW7JJ9zh4
IkarusTrojan.Win32.Crypt
FortinetRiskware/Adload
AVGWin32:CrypterX-gen [Trj]

How to remove Trojan-Downloader.Win32.Adload.spuk?

Trojan-Downloader.Win32.Adload.spuk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment