Win32/TrojanDownloader.Adload.NUJ removal tips

The Win32/TrojanDownloader.Adload.NUJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Adload.NUJ virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

How to determine Win32/TrojanDownloader.Adload.NUJ?


File Info:
crc32: 03B6661E
md5: 80ff2f5f6cb05ac0544a175475d29571
name: mini_01.exe
sha1: d7358c3d6afc73558ab03c3d59cb2a3c87f0aa61
sha256: 00cb1160080f415e8cdfa8530f160165372df260b0956e265e872f18beac3a68
sha512: 0efabd1de35c2ebe1a51785415608868c12c9a258bf8ac72ce700a5f489a922e934cbf6aba18cd9649839957d09039cf8dd829a14afe5ffa612854666d892bfd
ssdeep: 24576:HoUl2ucl5gYQ2XBEarUIekwh7y77j2tsH3TkDSt/60hSGAvY:/l2FlrBBCHRQ2tsXTpS5GGY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2019 x8c46x9ea6x7b14x8bb0 .Inc
InternalName: ADManage.exe
FileVersion: 2019.3.25.33
CompanyName: TODO: 
ProductName: x70edx70b9x65b0x95fb
ProductVersion: 2019.3.25.33
FileDescription: x70edx70b9x65b0x95fb
OriginalFilename: ADManage.exe
Translation: 0x0804 0x04b0

Win32/TrojanDownloader.Adload.NUJ also known as:

McAfee	Artemis!80FF2F5F6CB0
Malwarebytes	Adware.Downloader
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan-Downloader ( 00552f681 )
K7GW	Trojan-Downloader ( 00552f681 )
Symantec	PUA.Gen.2
ESET-NOD32	a variant of Win32/TrojanDownloader.Adload.NUJ
Kaspersky	not-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
Alibaba	TrojanDownloader:Win32/Adload.54b1cd78
Rising	Adware.AdPop!1.BA31 (CLASSIC)
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Graftor.652615 (B)
F-Secure	Trojan.TR/Dldr.Adload.sotdu
Zillya	Downloader.Adload.Win32.90662
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
Sophos	ADManage (PUA)
Ikarus	Trojan-Downloader.Win32.Adload
Jiangmin	AdWare.ComponentBased.o
Avira	TR/Dldr.Adload.sotdu
ViRobot	Adware.Graftor.1756888
AhnLab-V3	PUP/Win32.AdLoad.C3466452
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
Microsoft	PUA:Win32/CoinMiner
VBA32	Adware.ComponentBased
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CJR19
Fortinet	W32/Adload.NUJ!tr.dldr
AVG	Win32:Adware-gen [Adw]
Avast	Win32:Adware-gen [Adw]
Qihoo-360	HEUR/QVM41.2.C7B6.Malware.Gen

How to remove Win32/TrojanDownloader.Adload.NUJ?

Win32/TrojanDownloader.Adload.NUJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X