Malware

Win32/SoftonicDownloader.J potentially unwanted removal tips

Malware Removal

The Win32/SoftonicDownloader.J potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/SoftonicDownloader.J potentially unwanted virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32/SoftonicDownloader.J potentially unwanted?


File Info:

name: 6459EB1B7274EEDAE3FB.mlw
path: /opt/CAPEv2/storage/binaries/56d3685bc93b8757983c28fd4bbe0f6a118e2aecb3511957553318dce9ca91a6
crc32: BA7505B5
md5: 6459eb1b7274eedae3fbdcce8f9ac007
sha1: ecc4c04a56fb3b58c3cd28223e672f7c07e32c90
sha256: 56d3685bc93b8757983c28fd4bbe0f6a118e2aecb3511957553318dce9ca91a6
sha512: b5fd519c975a03add6296762e325ccb93a175d256407287c1b7379247d5783e57ad491b49c7595bfe049c28b8b73c52efcc99bf3273702c57b16957b45276fec
ssdeep: 49152:/4/TTzmOJJuZaPc/mn00EKQCh5WrFItcoAkXxqJLTCU+zxKdpD6xukk:g/TfNPqm0FKHWxAgkXotTChxKdpD6U
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T138C52300BB43D136D9A611324AB5AB6E893DB8214F2046DB63D85B7DDE302D16F33B79
sha3_384: f85b81c03e4fb8d229a37a1772e2ee765ab29ae2e965bb3f4bbd0e7777d64572f079296b2b3af9940bdccfeb8a886eab
ep_bytes: e88b070000e97afeffff8b4df464890d
timestamp: 2021-08-25 10:46:47

Version Info:

CompanyName: Softonic International S.L.
FileDescription: Softonic Installer
FileVersion: 1.0.4.0
InternalName:
LegalCopyright: Copyright 2021 Softonic International S.L.
OriginalFilename:
ProductName:
ProductVersion: 1.0.4.0
Translation: 0x0407 0x04b0

Win32/SoftonicDownloader.J potentially unwanted also known as:

LionicRiskware.Win32.Softonic.1!c
DrWebAdware.Downware.19987
McAfeeSoftonic-IFZ
K7AntiVirusAdware ( 00581cba1 )
K7GWAdware ( 00581cba1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/SoftonicDownloader.J potentially unwanted
Paloaltogeneric.ml
McAfee-GW-EditionSoftonic-IFZ
IkarusPUA.SoftonicDownloader
MicrosoftPUA:Win32/YongyuFeed
VBA32BScope.Trojan.Vittalia
MalwarebytesPUP.Optional.Softonic
FortinetW32/GenCBL.ATO!tr

How to remove Win32/SoftonicDownloader.J potentially unwanted?

Win32/SoftonicDownloader.J potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment