Categories: Trojan

TrojanDownloader:Win32/Banload.AEL removal

The TrojanDownloader:Win32/Banload.AEL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Banload.AEL virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Attempts to modify proxy settings
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanDownloader:Win32/Banload.AEL?


File Info:
name: A923115DF1BDADBFC9BE.mlwpath: /opt/CAPEv2/storage/binaries/2159fd069c33bbaaaa56626143eaf4c53cd77f5b4a6c6994f2e48e1c295de300crc32: 0D2714F1md5: a923115df1bdadbfc9be56c3bb03a0f2sha1: 7c6dd148bcbcef9feacc6d04ad5d65ef2db1aebfsha256: 2159fd069c33bbaaaa56626143eaf4c53cd77f5b4a6c6994f2e48e1c295de300sha512: b4042cb53547f3714394fb4742b1726c2a5b9ec8299a1697a931a0a785024a6226c1c71e420b6bf1163ca9b823017178e99b9d50f3d0a98aab53d1172436304essdeep: 384:E3PSaDHBYPM5At8wiLg/AzedsvpoBG9YFewkxANrJu0ThH0IB:E5rlK8fneoyBAZxcughltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C3C2D026EF7BB9C3D03A67725206DF846B88AFA0461F037E1F60B1979E543845A287C1sha3_384: 4bbabadb73b16eb622776be925e06b74ea90b22aa00f6d3ba2e8887aca1f9bf0070bfa4dff1089ffb1a9095c2f1221edep_bytes: 60be003017108dbe00e0feff5783cdfftimestamp: 2011-11-09 01:45:59
Version Info:
0: [No Data]

TrojanDownloader:Win32/Banload.AEL also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Delf.lvnO
AVG	Win32:Delf-RLY [Trj]
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.Crypt.Delf.I
FireEye	Generic.mg.a923115df1bdadbf
Skyhigh	BehavesLike.Win32.Dropper.mc
McAfee	Artemis!A923115DF1BD
Malwarebytes	Malware.Heuristic.2047
Zillya	Downloader.Delf.Win32.23891
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	TrojanDownloader:Win32/Banload.fc53338f
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.df1bda
BitDefenderTheta	AI:Packer.5F37A0F31D
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf.CBC
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Delf-29239
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.Crypt.Delf.I
NANO-Antivirus	Trojan.Win32.Delphi.ebzdjq
Avast	Win32:Delf-RLY [Trj]
Tencent	Win32.Trojan.Crypt.Dtgl
TACHYON	Trojan/W32.DP-Jorik.51712
Emsisoft	Trojan.Crypt.Delf.I (B)
F-Secure	Trojan.TR/Crypt.CFI.Gen
DrWeb	Trojan.DownLoader5.14843
VIPRE	Trojan.Crypt.Delf.I
TrendMicro	TROJ_GEN.R002C0DAT24
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Dropper.Delf
Jiangmin	TrojanDownloader.Generic.ptw
Avira	TR/Crypt.CFI.Gen
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	Win32.HeurC.KVM007.a
Microsoft	TrojanDownloader:Win32/Banload.AEL
Xcitium	Malware@#2w1zaovm7rtra
Arcabit	Trojan.Crypt.Delf.I
ViRobot	Trojan.Win.Z.Delf.27136
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.Crypt.Delf.I
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.C17167
VBA32	BScope.Trojan-Downloader.Banker.gen
ALYac	Trojan.Crypt.Delf.I
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0DAT24
Rising	Downloader.Banload!8.15B (TFE:5:fBHzY8iyi4N)
Yandex	Trojan.GenAsa!g2XargXJMWQ
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.23478.susgen
Fortinet	W32/Banker.H2H!tr.pws
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)
alibabacloud	Worm:Win/Delf.CBC