Trojan-Downloader.Win32.Adload.tkkk information

The Trojan-Downloader.Win32.Adload.tkkk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Adload.tkkk virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• At least one process apparently crashed during execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Sniffs keystrokes
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Likely virus infection of existing system binary

How to determine Trojan-Downloader.Win32.Adload.tkkk?

File Info:
name: D5318C302652BCDF5A36.mlw
path: /opt/CAPEv2/storage/binaries/b874dde984a7bc1f7143c3d791cf99ebfa1c42eca08c125e6b598bea345e0dd6
crc32: 4B119404
md5: d5318c302652bcdf5a36e7f44adcb5e5
sha1: 5ac557876006829c25fa5243d5d4402f05720aa3
sha256: b874dde984a7bc1f7143c3d791cf99ebfa1c42eca08c125e6b598bea345e0dd6
sha512: 1bc5a6a6ba1bc8e91201042524fd9a8af8019723c82fc8be2a786dfe48eb12db4075cba08bcc9765b7a4d69eeea6277554943aac01f372d0f08030629427e9e4
ssdeep: 98304:c1QTLLUUym1pzipeUQY2xfuhSe1ailtqD6Ylc632W7Cc7OX1mxj1XTTDfx9BlPKS:4oLUy1p2pzQtxfuhpaiTI6YlcM7CH1mV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A9461227B295613EC49E27350673A15054FBBB6DF827BE2636E0C88CCF661C01E3A765
sha3_384: ccef2095379cc581736bc9a6884b9414a7fc0a4e3d35205ba7b40d153e3eb41730c304f70ff7a40a32ed1c32c71e700b
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2021-07-22 05:43:38

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Tam Rich Ltd                                                
FileDescription: coHunter Setup                                              
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: coHunter                                                    
ProductVersion:                                                   
Translation: 0x0000 0x04b0

Trojan-Downloader.Win32.Adload.tkkk also known as:

How to remove Trojan-Downloader.Win32.Adload.tkkk?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.