Trojan

Trojan-Downloader.Win32.Adload.ticj removal guide

Malware Removal

The Trojan-Downloader.Win32.Adload.ticj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Adload.ticj virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

Related domains:

jorjifornk.live

How to determine Trojan-Downloader.Win32.Adload.ticj?


File Info:

name: 1013AABAE4C254C3E4C5.mlw
path: /opt/CAPEv2/storage/binaries/f8aec9c19da2b7f02efad645eee78d28b59d566620c83d4fb877008f4bcf77b1
crc32: 0CFD9B6D
md5: 1013aabae4c254c3e4c5dc28f8dd9256
sha1: 737bf9eceb0c6907240342780ce546b6f4e1500c
sha256: f8aec9c19da2b7f02efad645eee78d28b59d566620c83d4fb877008f4bcf77b1
sha512: 1e4b403be164d4f6cfe68345734b14b4a00b5365b6e7c23baf9f78cbbd58d952f5c3381e2cbf94ee3fc0ed0f1537a93c16bc6b95a5a1f06adfc3b6d959286c93
ssdeep: 49152:r9vheBgQmdNruQj1iQrNyB52mWaAZ/6TZ/eU03yEc0r7H0XcQ/B6g1ROGKrvIRFr:B5eBgPdvO2my6TZu60r73Q/lAG2vSl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A06334273C302B5F1A9223AC826845CFF27B56914E111197DFCDA4F12FD2C594BAEBA
sha3_384: 707d2b0bc4716bbfd07ebfd7d26ab656bf62ab3ea909b7079d78ac71c9ee10c1bd203857e0d80bcfc508d7fd319aa784
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-05-29 11:51:48

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Nobis Setup
FileVersion:
LegalCopyright:
ProductName: Nobis
ProductVersion: 9.0.13.0
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.ticj also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CylanceUnsafe
SangforTrojan.Win32.Sabsik.FL
K7AntiVirusTrojan ( 00587f231 )
AlibabaAdWare:Win32/AdLoad.55b249ae
K7GWTrojan ( 00587f231 )
CyrenW32/Agent.CTF.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32multiple detections
TrendMicro-HouseCallTROJ_GEN.R002H0CJV21
Paloaltogeneric.ml
KasperskyTrojan-Downloader.Win32.Adload.ticj
AvastNSIS:Downloader-ADB [Trj]
TencentWin32.Trojan-downloader.Adload.Dtip
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
SophosDownload Assistant (PUA)
IkarusTrojan-Dropper.Win32.Agent
MaxSecureTrojan.Malware.121218.susgen
AviraHEUR/AGEN.1144248
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin32.Backdoor.Bodelph.53RN39
CynetMalicious (score: 99)
McAfeeArtemis!1013AABAE4C2
MalwarebytesAdware.DownloadAssistant
FortinetW32/multiple_detections
AVGNSIS:Downloader-ADB [Trj]

How to remove Trojan-Downloader.Win32.Adload.ticj?

Trojan-Downloader.Win32.Adload.ticj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment