Trojan

What is “Win32/TrojanDownloader.Adload.NUI”?

Malware Removal

The Win32/TrojanDownloader.Adload.NUI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.Adload.NUI virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

How to determine Win32/TrojanDownloader.Adload.NUI?


File Info:

crc32: D6DE0695
md5: cacde94fca1c59da4d068c2b19169ac6
name: appupdui_01.exe
sha1: d500534054c7f0994b355e2380ee7edbd6eaa0b2
sha256: e1555425e363bb8e9fd172f5609dea4cddedba88fdfcee4430d9e5f953f55ef8
sha512: e146a0ab6565e3de1554c0072277b36fd093a8bd9f1b5eb112c90ff152747e8bc4ca59fd6be57ce2bf830d65618cabc82bf74a00b8aacb6ab38c91f3aa996164
ssdeep: 24576:dHuSZavHlUDRdPyg9r2toFYT/bgTRPm+DLz:dVwi9kuOzgTNX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2019
InternalName: jjbqupdate.exe
FileVersion: 1.0.0.1
CompanyName: x4e0ax9976x98cex4e91x7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: x6781x7b80x4fbfx7b7e
ProductVersion: 1.0.0.1
FileDescription: x6781x7b80x4fbfx7b7e-x66f4x65b0x7a0bx5e8f
OriginalFilename: jjbqupdate.exe
Translation: 0x0804 0x04b0

Win32/TrojanDownloader.Adload.NUI also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanTrojan.GenericKD.32370961
FireEyeGeneric.mg.cacde94fca1c59da
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeeGenericR-QSY!CACDE94FCA1C
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan-Downloader ( 0055093b1 )
BitDefenderTrojan.GenericKD.32370961
K7GWTrojan-Downloader ( 0055093b1 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroTROJ_GEN.R002C0GI519
APEXMalicious
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.32370961
Kasperskynot-a-virus:AdWare.Win32.Agent.xxyqby
AlibabaAdWare:Win32/Adload.8b54b33b
NANO-AntivirusRiskware.Win32.Adload.fzpdau
TencentMalware.Win32.Gencirc.10b4d254
Endgamemalicious (high confidence)
EmsisoftTrojan.GenericKD.32370961 (B)
ComodoMalware@#28hr6djt8g82y
F-SecureTrojan.TR/Dldr.Adload.bksmo
DrWebAdware.WDJiange.60
ZillyaDownloader.Adload.Win32.89202
Invinceaheuristic
McAfee-GW-EditionGenericR-QSY!CACDE94FCA1C
SophosMal/Generic-S
IkarusTrojan-Downloader.Win32.Adload
CyrenW32/Trojan.PMQG-1730
JiangminTrojanDownloader.Adload.zha
WebrootW32.Adware.Gen
AviraTR/Dldr.Adload.bksmo
MAXmalware (ai score=100)
Antiy-AVLGrayWare[AdWare]/Win32.Agent
ArcabitTrojan.Generic.D1EDF111
SUPERAntiSpywareTrojan.Agent/Gen-DownloaderAdload
ZoneAlarmnot-a-virus:AdWare.Win32.Agent.xxyqby
MicrosoftTrojanDownloader:Win32/Adload
AhnLab-V3Trojan/Win32.Agent.C3450006
VBA32Adware.Agent
ALYacTrojan.GenericKD.32370961
Ad-AwareTrojan.GenericKD.32370961
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
ZonerTrojan.Win32.84565
ESET-NOD32a variant of Win32/TrojanDownloader.Adload.NUI
TrendMicro-HouseCallTROJ_GEN.R002C0GI519
RisingAdware.AdPop!1.BA31 (CLOUD)
YandexTrojan.DL.Adload!Ak82P5nbtQE
SentinelOneDFI – Suspicious PE
MaxSecureTrojan.Malware.74522035.susgen
FortinetW32/Adload.NUI!tr.dldr
AVGWin32:Trojan-gen
Qihoo-360Win32/Trojan.0b5

How to remove Win32/TrojanDownloader.Adload.NUI?

Win32/TrojanDownloader.Adload.NUI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment