Win32/TrojanDropper.Addrop.AD removal instruction

The Win32/TrojanDropper.Addrop.AD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDropper.Addrop.AD virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/TrojanDropper.Addrop.AD?


File Info:
crc32: 7875BF44
md5: 43ac4a8c5029f5ee29f93c7a4d3b3c32
name: 43AC4A8C5029F5EE29F93C7A4D3B3C32.mlw
sha1: 3dfb53e148b55f5f88864e26070c8b51afdc2ae0
sha256: 1dfcf1a4d7cbb4540567db7dd3a6843a30ec7c84521816247df25ba1232ac8c4
sha512: d30182a5dbbf4871779e1f28f10406c98bdeea452201cf98a4ec30d4663293d3cb0238156da4922bde5df6da219b67f1adc2b8e41e80a1a401233427b78ad4c3
ssdeep: 49152:xC2lJmXbj5DIwbQea1LPEyK7r385JD3d6cIWh/V:xzlkbFDVrQMyOr3S3d6cLhN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Setup Engine Copyright xa9 2004-2015 Indigo Rose Corporation
InternalName: suf_launch
FileVersion: 9.5.0.0
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: Created with Setup Factory
ProductName: Setup Factory Runtime
ProductVersion: 9.5.0.0
FileDescription: Setup Application
OriginalFilename: suf_launch.exe
Translation: 0x0409 0x04e4

Win32/TrojanDropper.Addrop.AD also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Genome.a!c
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Downloader.Genome.Win32.60646
Sangfor	Trojan.Win32.Genome.ujqp
Alibaba	TrojanDownloader:Win32/Genome.811fbcce
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.148b55
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDropper.Addrop.AD
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Downloader.Win32.Genome.ujqp
NANO-Antivirus	Trojan.Win32.Megone.fcpldk
Tencent	Malware.Win32.Gencirc.11b906a2
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1121571
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.TrojDownloader.Genome.uj.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!43AC4A8C5029
VBA32	BScope.Trojan.FakeAV
Malwarebytes	PUP.Optional.Downloader
Panda	Trj/CI.A
Ikarus	Trojan-Downloader.Win32.Genome
Fortinet	W32/Genome.UJQP!tr.dldr
AVG	Win32:Malware-gen

How to remove Win32/TrojanDropper.Addrop.AD?

Win32/TrojanDropper.Addrop.AD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X