Trojan

TrojanDownloader:Win32/Banload.AIC removal

Malware Removal

The TrojanDownloader:Win32/Banload.AIC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Banload.AIC virus can do?

  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to modify proxy settings

How to determine TrojanDownloader:Win32/Banload.AIC?


File Info:

crc32: 34574A66
md5: aa6c9481066d03cea7096ccea6475e0e
name: AA6C9481066D03CEA7096CCEA6475E0E.mlw
sha1: 97ae44b585fe12ec6554615e6bf3a40a762d27f9
sha256: f89ce73eaad4df348ef3d8718851f78d9596e6864c1314413245073a039c63a0
sha512: f9b8db017a833d85e45fcbe8092984651eacd073f28c5c51249bd680c13402efa4fbb79f69d7494642fffcdad27ecf9382e3a7d31287d0e55cba7acb0f2c25a7
ssdeep: 6144:h1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe59WK:hjkArEN249AyE/rbaMct4bO2/VWK
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

CompiledScript: AutoIt v3 Script: 3, 3, 6, 1
FileVersion: 3, 3, 6, 1
FileDescription:
Translation: 0x0809 0x04b0

TrojanDownloader:Win32/Banload.AIC also known as:

BkavW32.AIDetectVM.malware2
DrWebTrojan.DownLoad2.60516
MicroWorld-eScanTrojan.Generic.7554550
FireEyeTrojan.Generic.7554550
McAfeeArtemis!AA6C9481066D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderTrojan.Generic.7554550
K7GWTrojan ( 00010d641 )
K7AntiVirusTrojan ( 00010d641 )
SymantecTrojan.Gen
APEXMalicious
AvastWin32:AutoIt-AMM [Trj]
ClamAVWin.Trojan.7554550-1
KasperskyTrojan-Downloader.Win32.AutoIt.ti
AlibabaTrojanDownloader:Win32/Banload.f676548e
Ad-AwareTrojan.Generic.7554550
SophosMal/Generic-S
ComodoMalware@#1supqnd01wbs
McAfee-GW-EditionBehavesLike.Win32.BadFile.dc
EmsisoftTrojan.Generic.7554550 (B)
JiangminTrojanDownloader.AutoIt.aug
MAXmalware (ai score=100)
KingsoftWin32.TrojDownloader.AutoIt.ti.(kcloud)
MicrosoftTrojanDownloader:Win32/Banload.AIC
ArcabitTrojan.Generic.D7345F6
ZoneAlarmTrojan-Downloader.Win32.AutoIt.ti
GDataTrojan.Generic.7554550
VBA32Trojan.Agent
ALYacTrojan.Generic.7554550
MalwarebytesMalware.Heuristic.1003
PandaTrj/CI.A
ESET-NOD32a variant of Generik.DSBLUKV
TencentWin32.Trojan-downloader.Autoit.Lnoe
IkarusTrojan.SuspectCRC
eGambitGeneric.Malware
FortinetW32/AutoIt.TI!tr.dldr
AVGWin32:AutoIt-AMM [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.30a

How to remove TrojanDownloader:Win32/Banload.AIC?

TrojanDownloader:Win32/Banload.AIC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment