Trojan

Trojan-Downloader.Win32.Adload.todp removal guide

Malware Removal

The Trojan-Downloader.Win32.Adload.todp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Adload.todp virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Adload.todp?


File Info:

name: 4F7FAD789996FFF7ED7C.mlw
path: /opt/CAPEv2/storage/binaries/0dd3676a04368971137b904fdaf557394ac74dede6ea1f20ef259ad8f694aa39
crc32: 9A5E67C9
md5: 4f7fad789996fff7ed7c3ea2aadeda1f
sha1: f65816c052febec439cbcd076d9e298f4205f5b1
sha256: 0dd3676a04368971137b904fdaf557394ac74dede6ea1f20ef259ad8f694aa39
sha512: 5ea3704b14d942734543abd99afb6131b1ab4ed8b153c6a94da35d95469816fc0a17836b359a18ff6a39cb2f0923d14dad719ea56948e23195e17098adbda2a4
ssdeep: 98304:qoy9J0jWLWHDQ+yH4VSSZcOZ5QKz9oDCSKvLA4pDNxtf37vOmOmrNOZvPReIj8/D:58JiDQz4VS+ECSixpDbB37lJ5gvbQEWf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E3463357A297D0B4C235DC302E73AB050D0F596C5C615C92314FAE4EAABFE47824A7E7
sha3_384: 72885a7f47723a486143624f02a4c926dcd88d38d9884d0c7a4d72a8fa734b1955582389d046638330d2632f744a7eb0
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Officia Setup
FileVersion:
LegalCopyright:
Translation: 0x0409 0x04e4

Trojan-Downloader.Win32.Adload.todp also known as:

MicroWorld-eScanGen:Variant.Adware.Cerbu.74750
FireEyeGen:Variant.Adware.Cerbu.74750
McAfeeArtemis!4F7FAD789996
CylanceUnsafe
K7AntiVirusTrojan ( 005722fe1 )
AlibabaAdWare:Win32/AdLoad.f41277a5
K7GWTrojan ( 005722fe1 )
CyrenW32/Adload.GK.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
Paloaltogeneric.ml
KasperskyTrojan-Downloader.Win32.Adload.todp
BitDefenderGen:Variant.Adware.Cerbu.74750
AvastWin32:CrypterX-gen [Trj]
Ad-AwareGen:Variant.Adware.Cerbu.74750
EmsisoftGen:Variant.Adware.Cerbu.74750 (B)
DrWebTrojan.DownLoader44.13876
TrendMicroTROJ_GEN.R002C0GLD21
McAfee-GW-EditionBehavesLike.Win32.AdwareFileTour.tc
GDataWin32.Backdoor.Bodelph.NHUACI
JiangminTrojanDownloader.Adload.aiod
AviraTR/Drop.Agent.xjijf
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3Trojan/Win.Generic.R457707
ALYacGen:Variant.Adware.Cerbu.74750
MAXmalware (ai score=60)
MalwarebytesAdware.DownloadAssistant
TrendMicro-HouseCallTROJ_GEN.R002C0GLD21
YandexTrojan.DL.Adload!XH/XBblOa3M
FortinetW32/Agent.SLC!tr
AVGWin32:CrypterX-gen [Trj]
PandaTrj/CI.A

How to remove Trojan-Downloader.Win32.Adload.todp?

Trojan-Downloader.Win32.Adload.todp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment