Should I remove “Trojan-Downloader.Win32.GuLoader”?

The Trojan-Downloader.Win32.GuLoader is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.GuLoader virus can do?

• Behavioural detection: Executable code extraction – unpacking
• At least one process apparently crashed during execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.GuLoader?

File Info:
name: 3DD857882D8644F24B33.mlw
path: /opt/CAPEv2/storage/binaries/c2c781cf28b1f4b21b21020dd03027b025ad9867325da659788c288a5ca2af86
crc32: 95F1EDB9
md5: 3dd857882d8644f24b3325bb46114bd7
sha1: 0f360561e0d216f34738b4f2a40a243bbea09c33
sha256: c2c781cf28b1f4b21b21020dd03027b025ad9867325da659788c288a5ca2af86
sha512: 9f982110e9b4ced425326cc31cb3ef523eebf9e6479e10199d998f9e5a718ebe420fd92c21377de2c3f7c593f69c5a2e378e2a7de63db3edf701d757e1940a86
ssdeep: 3072:V1NjcVVnLpPuckcFpY6DlkNbnQNWTz3yj+jHgfAzRIwv+qOyHFsPDlLjh8uoX2FW:XNeZKz+8TVIS+ZyHgZPfw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16D14E000B7A4C897E42710B1E83AD6F125DDBD1AD53A864B2777BF5875B63432823A0E
sha3_384: a22e3d9d9a75c4549a57ded61490e89cadc67beab210dc14c7850c0950159c27efd0bfe464b6ccca582182ba91e31f72
ep_bytes: 558bec81ecf40300005356576a205f33
timestamp: 2021-09-25 21:55:49

Version Info:
Comments: Svmme
CompanyName: radiatingskolop
FileDescription: FOSSILAGEFALDS
FileVersion: 0.28.21
LegalCopyright: Pullimutter233
LegalTrademarks: Spallersu
ProductName: Arge167
Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.GuLoader also known as:

How to remove Trojan-Downloader.Win32.GuLoader?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.