Categories: Trojan

TrojanDownloader:Win32/Banload!M removal

The TrojanDownloader:Win32/Banload!M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Banload!M virus can do?

Uses Windows utilities for basic functionality
Reads data out of its own binary image
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Creates a copy of itself
Uses suspicious command line tools or Windows utilities
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanDownloader:Win32/Banload!M?


File Info:
name: B20502C3F0AFBCE897CC.mlwpath: /opt/CAPEv2/storage/binaries/3c9bda09ce00fdf49970888c01e118b21dbec832aa0d4d5196a8191257f6dd48crc32: 7FE847F8md5: b20502c3f0afbce897ccede138370876sha1: 8e27719f0393b9f5cd2695cdd02982cbe4639c9asha256: 3c9bda09ce00fdf49970888c01e118b21dbec832aa0d4d5196a8191257f6dd48sha512: 340adb94b6b7b15c5a0f5378f041e2419273b22269d257061f99a02bde5f44c5bb87823e916d5719f0bd7c140de8c907c26dc0f432adea6d8fd90227c6a979e0ssdeep: 6144:iJDS9YoKaB+i2XTCvBmMGbEsg3PWctkT:i9yYoRB+jTuCbExfrtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17514123B58C8C6A5CDC5943320E5EE744265E4234C4173CFE2A7E87C49EF2AC366E568sha3_384: 99cfc68d442bec1906f471a32b7743417dd3caf9eca4528624dff8e4bcb35a028e3d8969b770a164a3731994c37042c2ep_bytes: 60e803000000e9eb045d4555c3e80100timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

TrojanDownloader:Win32/Banload!M also known as:

Lionic	Trojan.Win32.Banload.a!c
DrWeb	Trojan.DownLoad.3634
MicroWorld-eScan	Trojan.Crypt.Delf.G
FireEye	Generic.mg.b20502c3f0afbce8
Skyhigh	BehavesLike.Win32.Generic.cc
ALYac	Trojan.Crypt.Delf.G
Cylance	unsafe
Zillya	Downloader.Banload.Win32.19514
Sangfor	Trojan.Win32.Banload.qag
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/Banload.438ac1da
K7GW	Trojan-Downloader ( 000490001 )
K7AntiVirus	Trojan-Downloader ( 000490001 )
Arcabit	Trojan.Crypt.Delf.G
BitDefenderTheta	Gen:NN.ZelphiF.36744.mOWba8Qm2Mg
Symantec	Downloader
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Banload.PNI
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Downloader.47246-1
Kaspersky	Trojan-Downloader.Win32.Banload.qag
BitDefender	Trojan.Crypt.Delf.G
NANO-Antivirus	Trojan.Win32.Banload.ubdx
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan-Downloader.Banload.Pgil
Emsisoft	Trojan.Crypt.Delf.G (B)
F-Secure	Trojan.TR/Banload.AD
VIPRE	Trojan.Crypt.Delf.G
TrendMicro	TROJ_DWNLDR.AN
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Timpin
Jiangmin	TrojanDownloader.Banload.tff
Webroot	W32.Malware.Gen
Avira	TR/Banload.AD
Antiy-AVL	Trojan[Downloader]/Win32.Delf
Kingsoft	Win32.Troj.Undef.a
Xcitium	TrojWare.Win32.TrojanDownloader.Delf.gen@1xqow5
Microsoft	TrojanDownloader:Win32/Banload.gen!M
ViRobot	Trojan.Win32.A.Downloader.199680.BY[ASPack]
ZoneAlarm	Trojan-Downloader.Win32.Banload.qag
GData	Trojan.Crypt.Delf.G
Google	Detected
AhnLab-V3	Trojan/Win32.Banload.C136579
McAfee	Artemis!B20502C3F0AF
MAX	malware (ai score=100)
VBA32	TScope.Trojan.Delf
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/Nabload.ACN
TrendMicro-HouseCall	TROJ_DWNLDR.AN
Rising	Malware.Undefined!8.C (TFE:5:JiYjVVMKQME)
Yandex	Trojan.GenAsa!Fv9L2hSsQwk
MaxSecure	Trojan.Malware.1302257.susgen
Fortinet	W32/Banker.QAG!tr.dldr
AVG	Win32:Trojan-gen
Cybereason	malicious.f0393b
DeepInstinct	MALICIOUS