Trojan

How to remove “Trojan-Downloader.Win32.Adload.szsc”?

Malware Removal

The Trojan-Downloader.Win32.Adload.szsc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Adload.szsc virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Network activity detected but not expressed in API logs

Related domains:

wpad.local-net
jorjifornk.live

How to determine Trojan-Downloader.Win32.Adload.szsc?


File Info:

name: 09BAA1C40B8BD7E037E4.mlw
path: /opt/CAPEv2/storage/binaries/af94bd8fe135590f32c3f2eaa446d96feddce9fe128a38a15647191c85d680d7
crc32: E410F2FF
md5: 09baa1c40b8bd7e037e45ad44d357366
sha1: eb45d95c8ab4842a41bb10e3a7e7130ef0a64ca1
sha256: af94bd8fe135590f32c3f2eaa446d96feddce9fe128a38a15647191c85d680d7
sha512: 9ffc5a9b3db05ce1b646f7c99cea1e2c010b0aff9ef2445cb5388b5503ac13a6667298c2582204037a8d36bd9272ec93fd4a4ba4e4d37ecdc0438422867c2e92
ssdeep: 196608:Wug5Cwa6hlKpiudmzt6+0+RCr7hGcVut0Zm:O5Cwl0kt6tVVLq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T143862327B298643EC46E27354533A41058FBBAADF817BE167AE0C48CCF761C11E3B665
sha3_384: 32989a229c89b8c95ce62e512305e50ef7b776a9db0b440414dcee770f4865d9b24c4ee4d49f2ac2aabe4e44f86e0e87
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2021-07-22 05:43:38

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: eUS
FileDescription: eUS Todo PCTrans Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: eUS Todo PCTrans
ProductVersion:
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.szsc also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop18.42303
MicroWorld-eScanGen:Variant.Ser.Midie.1974
FireEyeGen:Variant.Ser.Midie.1974
ALYacGen:Variant.Ser.Midie.1974
CylanceUnsafe
SangforTrojan.Win32.Adload.szsc
K7AntiVirusTrojan ( 005722fe1 )
AlibabaAdWare:Win32/AdLoad.cf40864a
K7GWTrojan ( 005722fe1 )
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/Agent.DRH.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Malware.Chrop-9908991-0
KasperskyTrojan-Downloader.Win32.Adload.szsc
BitDefenderGen:Variant.Ser.Midie.1974
AvastWin32:Trojan-gen
TencentWin32.Trojan-downloader.Adload.Hpi
Ad-AwareGen:Variant.Ser.Midie.1974
EmsisoftGen:Variant.Ser.Midie.1974 (B)
TrendMicroTROJ_GEN.R002C0GJA21
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
SophosMal/Generic-S
IkarusTrojan.Win32
GDataWin32.Trojan.BSE.18VTQ3K
AviraHEUR/AGEN.1144245
ViRobotTrojan.Win32.Z.Sabsik.8219644
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
CynetMalicious (score: 100)
AhnLab-V3Adware/Win.DownloadAssistant.C4680651
McAfeeArtemis!09BAA1C40B8B
MAXmalware (ai score=85)
VBA32Trojan.Sabsik.FL
MalwarebytesAdware.DownloadAssistant
TrendMicro-HouseCallTROJ_GEN.R002C0GJA21
MaxSecureTrojan.Malware.6991189.susgen
FortinetW32/Agent.SLC!tr
WebrootW32.Malware.Gen
AVGWin32:Trojan-gen
PandaTrj/CI.A

How to remove Trojan-Downloader.Win32.Adload.szsc?

Trojan-Downloader.Win32.Adload.szsc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment