Trojan.Downloader
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 90 % (High) |
| Infected Computers: | 3,531 |
| First Seen: | July 24, 2009 |
| Last Seen: | September 13, 2025 |
| OS(es) Affected: | Windows |
The detection of Trojan.Downloader on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to download and install additional malicious software on your computer, which can lead to a range of problems, including data theft, system crashes, and unauthorized access to your personal information.
Table of Contents
What Is Trojan.Downloader?
Trojan.Downloader is a type of Trojan horse malware that disguises itself as a legitimate program or file. Once installed on your system, it can download and execute additional malware, including viruses, spyware, and adware. This type of malware is often spread through email attachments, infected software downloads, or exploited vulnerabilities in your system or applications.
How Trojan.Downloader Operates
Trojan.Downloader operates by creating a backdoor on your system, allowing remote attackers to access and control your computer. It can also modify system settings, disable security software, and steal sensitive information, such as login credentials, credit card numbers, and personal data. Additionally, Trojan.Downloader can download and install other types of malware, including ransomware, keyloggers, and rootkits, which can further compromise your system's security.
Symptoms of Infection
Some common symptoms of a Trojan.Downloader infection include slow system performance, frequent crashes, and unusual network activity. You may also notice unfamiliar programs or icons on your desktop, or receive unexpected pop-ups and alerts. In some cases, you may not notice any symptoms at all, which is why it's essential to regularly scan your system for malware and keep your security software up to date.
- Unexplained changes to your system settings or configuration
- New, unfamiliar programs or toolbars installed on your system
- Increased network activity, even when you're not using your computer
- Frequent system crashes or freezes
- Slow system performance or sluggish responsiveness
How to Remove Trojan.Downloader
- Boot your system in Safe Mode with Networking to prevent the malware from loading
- Run a full scan with a reputable anti-malware tool, such as SpyHunter, to detect and remove the malware
- Uninstall any suspicious programs or applications that you don't recognize or need
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons
- Reboot your system and run another full scan to ensure that the malware has been completely removed
Conclusion
Removing Trojan.Downloader from your system requires careful attention to detail and a thorough understanding of the malware removal process. By following the steps outlined above and taking proactive measures to protect your system, you can help prevent future infections and keep your personal data safe. Remember to always keep your security software up to date, use strong passwords, and be cautious when opening email attachments or downloading software from the internet.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| eSafe | Win32.Banker |
| ClamAV | Trojan.Downloader-34408 |
| Sophos | Mal/EncPk-DG |
| Fortinet | W32/PolySmall.BP!tr |
| Symantec | Hacktool |
| Sunbelt | Trojan.Win32.Agent.lv |
| Sophos | AppLite |
| Prevx1 | Medium Risk Virus |
| Panda | Adware/Popper |
| NOD32 | probably a variant of Win32/Adware.Agent |
| Microsoft | Adware:Win32/InternetSpeedMonitor |
| McAfee | Generic Downloader.s |
| K7AntiVirus | not-a-virus:AdWare.Win32.Agent.lv |
| Ikarus | Trojan-Downloader.Win32.VB.nw |
| Fortinet | Adware/Agent |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | Dscp1.exe | 50a51eed61fd2102fa40e4c11d88c5e3 | 62 |
| 2. | the librarian solomons mine.exe | 2e0089142d4a6eeeb9adc6641bebccef | 4 |
| 3. | _OUdescription.exe | 50089277efd5ede6572e8c1ebe8a4e85 | 1 |
| 4. | toolbar.exe | 5c33d977da7c7a767a11639376a8a1ba | 1 |
| 5. | gacineon.exe | 72e4a2a95b102f332cf1b56d7f67a53b | 1 |
| 6. | Desktop.sysm | 8e47a67630d5202a0b8798b6607c71ed | 1 |
| 7. | aamg.exe | 09769bab9b1620c49b8f1c0993779b4d | 1 |
| 8. | duxp.exe | d9f83ef353411236472345941d4a5e4e | 1 |
| 9. | gm.exe | 39bc09e4f3b9c5707cb4244e8b11c936 | 0 |
| 10. | edtcw.dll | b88f36ad1b0775aae6b7fca1c667032d | 0 |
| 11. | khfcdcy.dll | 91ecfd3124ca508800178d6617b98ae9 | 0 |
| 12. | bkodembw.dll | 6469160c08dd06de022733cbc085a932 | 0 |
| 13. | __c00A3D23.dat | 15921705717795e3d347d960648a7755 | 0 |
| 14. | nkwglcqf.dll | 88c87100ff81f30ed74d30836af37784 | 0 |
| 15. | vtkhylcg.dll | 08fcb79e0edb4ac8170e9695eed6b03d | 0 |
| 16. | __c005F324.dll | c25f593b5530bf2b2ae57bc863049886 | 0 |
| 17. | glwlnvmc.dll | d21058fefc643161aa689da2a92f87a2 | 0 |
| 18. | zoxboi.dll | f08944879e6175a0de8f6541913c01d4 | 0 |
| 19. | __c00C0CD.dat | 0545294a912933a0e292c0850955d1ce | 0 |
| 20. | laf1.exe | 70cbe5a52541325d441f0a250a1ccea4 | 0 |
| 21. | ms1.exe | af79de8a3240ddad3c7873d4bb094d0a | 0 |
| 22. | svchosts.exe | 7b69c00ba9f072dd06d61411fc09ded5 | 0 |
| 23. | mc-0-0-0.exe | 6b9e1479a7de17344efed6df5d69b322 | 0 |
| 24. | b124.exe | 4c9ecfc80b5a7b024efd9ac1b781e124 | 0 |
| 25. | winsys3.exe | cdcf60fad1b3cc2d9a3028b6f1082e53 | 0 |
| 26. | {b91413db-d88a-a499-2661-f9f9441c9f46}.dll | 8e118ebe8cc3ddea1f5920d5bd6b4489 | 0 |
| 27. | 221433eve.dll | 63cb4fe68dd3b535fd9880ee96d5dc24 | 0 |
| 28. | psvmon9.exe | 10c8cb9843e73c1579b7fcd8c4a6fd4a | 0 |
| 29. | file.exe | dce9b8c6493d477b86b1b4b9d3791eb1 | 0 |