Trojan-Downloader.Win32.Adload.szsb (file analysis)

The Trojan-Downloader.Win32.Adload.szsb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Adload.szsb virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Adload.szsb?

File Info:
name: F84722686EFC5C7CAF0D.mlw
path: /opt/CAPEv2/storage/binaries/f228642389434ec66a9c989e66159558e5a88d82a444e828d5bde7a689b7af3f
crc32: 4CA64DBD
md5: f84722686efc5c7caf0d31be182bef39
sha1: a50289286b60ec90d127282d1e444bdf37289bf2
sha256: f228642389434ec66a9c989e66159558e5a88d82a444e828d5bde7a689b7af3f
sha512: 74fd5669452df54827ab6bcafcb1f092f6d9aae527c1d45046ed3a43b250cf358dcf91cebb85d05cebe773b94c18759d276c2bf4c8a56dd05d36f67f6973dd7d
ssdeep: 98304:zCD9fHDZVxWP46lJYhjKpCEqPaJP2uqU2PJ/16WHIl:u1TilWJK4EqPaEuqRz7ol
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B263343E38316B0F4B8B739DC5396846C4DB85C55F021269EF8DE4F8AB82965CB88F1
sha3_384: bf825b2dc8ff5cd53accd42bc550d3b6999a0cf48116c1197538f95ec01afd1c46e35dddb711408772d139e6bc456acb
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-05-29 11:51:48

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: Est Setup                                                   
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: Est                                                         
ProductVersion: 5.15.19.14          
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.szsb also known as:

How to remove Trojan-Downloader.Win32.Adload.szsb?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.