Trojan-Downloader.Win32.Adload.tnyq removal guide

The Trojan-Downloader.Win32.Adload.tnyq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Adload.tnyq virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Adload.tnyq?

File Info:
name: BC1EAB627DA3F5F7F394.mlw
path: /opt/CAPEv2/storage/binaries/fc6e217b6a2f1db60fac91e16232c9fb46197aef9194ed6c9d67cc0c7e9e8506
crc32: 26928F21
md5: bc1eab627da3f5f7f394a7e62d16a9e1
sha1: f15a7629a947440b4e8faa166c996dcfe5151637
sha256: fc6e217b6a2f1db60fac91e16232c9fb46197aef9194ed6c9d67cc0c7e9e8506
sha512: 7ebbe3a83fba03b2d497dde91d0f086b8032af6397b6fb8e2d5775a8b41df62be1eea7506360b3fee5d7d48b21ed7a7cbe75c814729bfb51cca43662a981c9d0
ssdeep: 98304:qmHbRhSK77e9Dw8xXLlOCULjPybM9AHvDG7tGAajiB405DZn7wGcS:J1SrxX3ULjPmMiBjiBt/n0RS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10E2633A1BCC3A1FDC8718978DE92B9ADB2379940A41434C7706E37472F3AD64328E597
sha3_384: 996f41e42335e1145b2c6d66b4e1c28460a2b6275b55e05ec854b2da5cca040f81596a62cc1a78f637ca7afe8fb5e279
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: Vero Setup                                                  
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan-Downloader.Win32.Adload.tnyq also known as:

How to remove Trojan-Downloader.Win32.Adload.tnyq?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.