Trojan

Trojan-Downloader.Win32.Adload.szoy removal

Malware Removal

The Trojan-Downloader.Win32.Adload.szoy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Adload.szoy virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Adload.szoy?


File Info:

name: C11BBDAF356F21FA1047.mlw
path: /opt/CAPEv2/storage/binaries/1a8846f67098a61e281b005611c9433e0d6cb312da1571ffa29f92999052ef28
crc32: 4A0E880A
md5: c11bbdaf356f21fa104744a7ff892377
sha1: a002cf6f8979f12fd9b73d28028deb1fea34b0f9
sha256: 1a8846f67098a61e281b005611c9433e0d6cb312da1571ffa29f92999052ef28
sha512: 654aa1fcc430b361c79e9a77c77a1c1d40953cecde18b8f76b22fc2fe50fa30771332ed8b628afb6644d0054de669c0407b52d11afda830f66c9548bb8bd136c
ssdeep: 98304:GipKPwh7V/1nIHcBdpEWMPXPN9/O7QDCjirXbai5gVfl:GipGiB3mfPOCUserxl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A4263303B7C30DB2D2AD913DC51546C4AE5779B826D210234CB5E96F0BB9AC3CEBA953
sha3_384: d3a399c0b79df5a188d975337f87f9c5929f4444efd70bd7ce8235bb61bad5c3c2d8316b5659867cfa660e747a6f897a
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-05-29 11:51:48

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Unde Setup
FileVersion:
LegalCopyright:
ProductName: Unde
ProductVersion: 0.1.1.19
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.szoy also known as:

LionicTrojan.Win32.Adload.a!c
Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Adload.szoy
K7AntiVirusTrojan ( 00587f9d1 )
AlibabaAdWare:Win32/AdLoad.2a0b1548
K7GWTrojan ( 00587f9d1 )
CyrenW32/Agent.CUW.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32multiple detections
TrendMicro-HouseCallTROJ_GEN.R002H0CJ221
Paloaltogeneric.ml
KasperskyTrojan-Downloader.Win32.Adload.szoy
AvastNSIS:Downloader-ADB [Trj]
TencentWin32.Trojan-downloader.Adload.Sudn
SophosDownload Assistant (PUA)
McAfee-GW-EditionBehavesLike.Win32.Dropper.rc
AviraHEUR/AGEN.1144248
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
ViRobotTrojan.Win32.Z.Agent.4665654
ZoneAlarmTrojan-Downloader.Win32.Adload.szoy
GDataWin32.Backdoor.Bodelph.Y79ZZI
CynetMalicious (score: 99)
McAfeeArtemis!C11BBDAF356F
VBA32TrojanDownloader.Adload
MalwarebytesAdware.DownloadAssistant
IkarusTrojan-Dropper.Win32.Agent
MaxSecureTrojan.Malware.1728101.susgen
FortinetW32/Agent.NCV!tr
AVGNSIS:Downloader-ADB [Trj]

How to remove Trojan-Downloader.Win32.Adload.szoy?

Trojan-Downloader.Win32.Adload.szoy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment