Trojan

Trojan-Downloader.Win32.Zload.mb information

Malware Removal

The Trojan-Downloader.Win32.Zload.mb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Zload.mb virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Downloader.Win32.Zload.mb?


File Info:

crc32: 06CDCF72
md5: 49225ec84272c2a816082cf517dafe4f
name: upload_file
sha1: 840639160139461e4b845cca547030536de78f2f
sha256: ba4f2e2acb912e9006c48b172fc3ea202b12371caad71b161dbddbad435a1fbf
sha512: 79a6241d56d9c72c8d0c9f997472412c96c280bfe2b42d03d298e970bd7a5ed3796f4eeca983b2314f48c9aec384117b68395d975ef4570b3f2082525a46e780
ssdeep: 3072:SvX/VWTa+G4SFj8ecb0pTflkEoKPtx2SErhA6P7SoxoOdwMQeO6R74bwwuAPT5:S/P18eU0pmE92SEC6eNOdtO6R740wLF
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Downloader.Win32.Zload.mb also known as:

FireEyeGeneric.mg.49225ec84272c2a8
Qihoo-360Win32/Trojan.Downloader.a87
McAfeeGenericRXKR-BG!49225EC84272
CylanceUnsafe
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusSpyware ( 005612b41 )
K7GWSpyware ( 005612b41 )
CrowdStrikewin/malicious_confidence_100% (D)
TrendMicroTrojan.Win32.MALREP.THGOFBO
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:Trojan-gen
GDataWin32.Malware.ZLoader.B
KasperskyTrojan-Downloader.Win32.Zload.mb
AlibabaTrojanDownloader:Win32/Zload.d5590cf4
NANO-AntivirusTrojan.Win32.Zload.hmqjez
TencentWin32.Trojan-downloader.Zload.Pbyw
TACHYONTrojan-Downloader/W32.Zload.208896
SophosMal/Generic-S
ComodoMalware@#1khsdv4szso9f
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebTrojan.Siggen9.56785
Invinceaheuristic
Trapminesuspicious.low.ml.score
IkarusMalware.Win32.ZLoader
CyrenW32/Trojan.BIIK-9397
JiangminTrojanDownloader.Zload.cl
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan[Spy]/Win32.Zbot
Endgamemalicious (high confidence)
ZoneAlarmTrojan-Downloader.Win32.Zload.mb
MicrosoftTrojan:Win32/Occamy.CBA
CynetMalicious (score: 85)
BitDefenderThetaGen:NN.ZedlaF.34144.mq4@amJYNhj
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Spy.Zbot.ADI
TrendMicro-HouseCallTrojan.Win32.MALREP.THGOFBO
RisingSpyware.Zbot!8.16B (CLOUD)
FortinetW32/Zbot.ADI!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Trojan-Downloader.Win32.Zload.mb?

Trojan-Downloader.Win32.Zload.mb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment