Trojan

About “Trojan-Downloader.Win32.Adload.tadp” infection

Malware Removal

The Trojan-Downloader.Win32.Adload.tadp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Adload.tadp virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

Related domains:

wpad.local-net
jorjifornk.live

How to determine Trojan-Downloader.Win32.Adload.tadp?


File Info:

name: 93FA61D095C64ED82D7F.mlw
path: /opt/CAPEv2/storage/binaries/e409c48103ecd104d4b9387364307a6f842d1d1843ccfce53792d62521cca267
crc32: B2D08141
md5: 93fa61d095c64ed82d7f85a28c5a67a5
sha1: 120d2dbb72a22de0e17d63a64f072a82b0cd675b
sha256: e409c48103ecd104d4b9387364307a6f842d1d1843ccfce53792d62521cca267
sha512: a6fda3c4be8e9a24164506296e736a477827c06049c0e1eba8c777ae5d8826e81e80ba084fdc623a0781ee579c853cf580cb150625f38c52adf5f887f54286e5
ssdeep: 98304:ewhK0zTMt0uYufAyXkYBxlcSx5Six18l1l:ewhK0G0uE/Yum5SA21l
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T104263306FBE35533E228273D6D1040403E7EFA2C01D4946BADF8DE2E49B9B96947D972
sha3_384: 6c695fbc18fe5491717764835041bff213bf365a282e600184c95b4d14cce76b73d4a78215d00d363533aa448e62c01c
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-05-29 11:51:48

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Dolores Setup
FileVersion:
LegalCopyright:
ProductName: Dolores
ProductVersion: 5.3.6.12
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.tadp also known as:

LionicTrojan.Win32.Adload.a!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.38126049
FireEyeTrojan.GenericKD.38126049
McAfeeArtemis!93FA61D095C6
K7AntiVirusTrojan ( 005850dc1 )
AlibabaAdWare:Win32/AdLoad.d8fd154b
K7GWTrojan ( 005850dc1 )
CyrenW32/Agent.CTL.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32multiple detections
TrendMicro-HouseCallTROJ_GEN.R002H0CKQ21
Paloaltogeneric.ml
KasperskyTrojan-Downloader.Win32.Adload.tadp
BitDefenderTrojan.GenericKD.38126049
AvastNSIS:Downloader-ADB [Trj]
TencentWin32.Trojan-downloader.Adload.Hvje
Ad-AwareTrojan.GenericKD.38126049
EmsisoftTrojan.GenericKD.38126049 (B)
McAfee-GW-EditionBehavesLike.Win32.BadFile.rc
SophosDownload Assistant (PUA)
IkarusTrojan-Dropper.Win32.Agent
MaxSecureTrojan.Malware.121218.susgen
AviraHEUR/AGEN.1144248
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftRansom.Win32.Wacatac.sa
GDataWin32.Backdoor.Bodelph.L9K6V1
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.38126049
MAXmalware (ai score=86)
MalwarebytesAdware.DownloadAssistant
FortinetW32/Agent.COS!tr
AVGNSIS:Downloader-ADB [Trj]

How to remove Trojan-Downloader.Win32.Adload.tadp?

Trojan-Downloader.Win32.Adload.tadp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment