What is “Trojan-Downloader.Win32.Adload.tgzo”?

The Trojan-Downloader.Win32.Adload.tgzo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Adload.tgzo virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Adload.tgzo?

File Info:
name: 34AE8D90AEBECEDB9B0E.mlw
path: /opt/CAPEv2/storage/binaries/58341f652a704ff26cb6e00cca3030c51b2d537db2b4e4019e2348b68bdf90f7
crc32: 7E1DDA08
md5: 34ae8d90aebecedb9b0e9cc9fdf7fbe4
sha1: 99406761e10bf87916b06f96e5c7d8e3bf55b7ad
sha256: 58341f652a704ff26cb6e00cca3030c51b2d537db2b4e4019e2348b68bdf90f7
sha512: a36a4a843f76986ade58e42137c22286413a16b71ecd44fcee0b71e6dad28682f3d77faa7139e0c73ee4118f256f71091e7d9ee78e4958b5e8d6988eb8df7b07
ssdeep: 98304:zmOFBRAUdJ2K46if/6hfpTrW+npuTa1MVWTusKA5ebU5WodQ6/Z7H:C0BuUdoKBi6fpTqza1MVzsKwebUPXZ7H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T172361216A2A3707BDD693175D485E1FD8FE62BA738D184732CF0EB8E2535286087BD60
sha3_384: 2e745bbb839fccc14d765b283bf5e0b3dbf444616db89cd0e9a6aa49096684cafe0572d6531235598b202925b3d93cf6
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-05-29 11:51:48

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: Veritatis Setup                                             
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: Veritatis                                                   
ProductVersion: 5.1.18.1            
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.tgzo also known as:

How to remove Trojan-Downloader.Win32.Adload.tgzo?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.