Trojan

TrojanDownloader:Win32/Banload!N removal guide

Malware Removal

The TrojanDownloader:Win32/Banload!N is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Banload!N virus can do?

  • Creates RWX memory
  • Installs itself for autorun at Windows startup
  • Likely virus infection of existing system binary
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Banload!N?


File Info:

crc32: 3015C29E
md5: b6abef1f9940ea31b47459e8a7b7bd97
name: B6ABEF1F9940EA31B47459E8A7B7BD97.mlw
sha1: d725dae4d50dab618dc9f0d8d96d77075004ddf4
sha256: dce085d7df750fa7818b4b4f5f244acbcf25767073ec19292b83f463c5274d1a
sha512: c537706a0644854319dafeeb01af56e86460c60038022a82cf8d56240704c9ef1b3512ab7e9e6984bb60c3ded41a862677768787d882ad76f5c1d91a86272bed
ssdeep: 12288:5WgOrrOI6GluqijIvyrgzcshK3n5Th1IxB:U7nOUuqijIKUVhk591i
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

TrojanDownloader:Win32/Banload!N also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.7549735
FireEyeGeneric.mg.b6abef1f9940ea31
CAT-QuickHealDownloader.Banload.9985
McAfeePWS-FCLH!B6ABEF1F9940
MalwarebytesTrojan.Banker
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderTrojan.Generic.7549735
K7GWSpyware ( 00194a9d1 )
K7AntiVirusSpyware ( 00194a9d1 )
BaiduWin32.Trojan.Delf.fw
CyrenW32/Downloader.GY.gen!Eldorado
SymantecSpyware.Keylogger
TotalDefenseWin32/Bancos.WYC
APEXMalicious
AvastWin32:DropperX-gen [Drp]
ClamAVWin.Dropper.Banload-6563212-0
KasperskyTrojan-Downloader.Win32.Banload.baeh
NANO-AntivirusTrojan.Win32.Banload.tggxd
ViRobotTrojan.Win32.A.Downloader.632944
RisingTrojan.Win32.DelfCode.fb (CLASSIC)
Ad-AwareTrojan.Generic.7549735
EmsisoftTrojan.Generic.7549735 (B)
ComodoTrojWare.Win32.TrojanSpy.Agent.~gga@22paa0
F-SecureTrojan.TR/BAS.Samca.1246600
DrWebWin32.HLLW.Siggen.1499
ZillyaDownloader.Banload.Win32.44061
TrendMicroTROJ_BANLOAD_0000000.TOMA
McAfee-GW-EditionPWS-FCLH!B6ABEF1F9940
SophosTroj/Pankki-B
JiangminTrojan/Generic.aijy
MaxSecureDownloader.Banload.BAEH
AviraTR/BAS.Samca.1246600
Antiy-AVLTrojan[Downloader]/Win32.Banload
KingsoftHeur.SSC.2731166.1216.(kcloud)
MicrosoftTrojanDownloader:Win32/Banload.gen!N
ArcabitTrojan.Generic.D733327
SUPERAntiSpywareTrojan.Agent/Gen-Banload
ZoneAlarmTrojan-Downloader.Win32.Banload.baeh
GDataTrojan.Generic.7549735
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Banker.R3410
Acronissuspicious
BitDefenderThetaAI:Packer.8C9441F118
ALYacTrojan.Generic.7549735
MAXmalware (ai score=87)
VBA32TScope.Trojan.Delf
CylanceUnsafe
PandaGeneric Malware
ZonerTrojan.Win32.36720
ESET-NOD32Win32/Spy.Delf.OJX
TrendMicro-HouseCallTROJ_BANLOAD_0000000.TOMA
TencentMalware.Win32.Gencirc.10b0ee16
YandexTrojan.GenAsa!Vp4HHeZ8yH0
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetW32/Delf.OJX!tr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.f9940e
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Downloader.151

How to remove TrojanDownloader:Win32/Banload!N?

TrojanDownloader:Win32/Banload!N removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment