Threat Database Trojans Trojan.Downloader

Trojan.Downloader

By CagedTech in Trojans
Published:
Last updated:

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 3,531
First Seen: July 24, 2009
Last Seen: September 13, 2025
OS(es) Affected: Windows

The detection of Trojan.Downloader on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to download and install additional malicious software on your computer, which can lead to a range of problems, including data theft, system crashes, and unauthorized access to your personal information.

What Is Trojan.Downloader?

Trojan.Downloader is a type of Trojan horse malware that disguises itself as a legitimate program or file. Once installed on your system, it can download and execute additional malware, including viruses, spyware, and adware. This type of malware is often spread through email attachments, infected software downloads, or exploited vulnerabilities in your system or applications.

How Trojan.Downloader Operates

Trojan.Downloader operates by creating a backdoor on your system, allowing remote attackers to access and control your computer. It can also modify system settings, disable security software, and steal sensitive information, such as login credentials, credit card numbers, and personal data. Additionally, Trojan.Downloader can download and install other types of malware, including ransomware, keyloggers, and rootkits, which can further compromise your system's security.

Symptoms of Infection

Some common symptoms of a Trojan.Downloader infection include slow system performance, frequent crashes, and unusual network activity. You may also notice unfamiliar programs or icons on your desktop, or receive unexpected pop-ups and alerts. In some cases, you may not notice any symptoms at all, which is why it's essential to regularly scan your system for malware and keep your security software up to date.

  • Unexplained changes to your system settings or configuration
  • New, unfamiliar programs or toolbars installed on your system
  • Increased network activity, even when you're not using your computer
  • Frequent system crashes or freezes
  • Slow system performance or sluggish responsiveness

How to Remove Trojan.Downloader

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading
  2. Run a full scan with a reputable anti-malware tool, such as SpyHunter, to detect and remove the malware
  3. Uninstall any suspicious programs or applications that you don't recognize or need
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons
  5. Reboot your system and run another full scan to ensure that the malware has been completely removed

Conclusion

Removing Trojan.Downloader from your system requires careful attention to detail and a thorough understanding of the malware removal process. By following the steps outlined above and taking proactive measures to protect your system, you can help prevent future infections and keep your personal data safe. Remember to always keep your security software up to date, use strong passwords, and be cautious when opening email attachments or downloading software from the internet.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
eSafe Win32.Banker
ClamAV Trojan.Downloader-34408
Sophos Mal/EncPk-DG
Fortinet W32/PolySmall.BP!tr
Symantec Hacktool
Sunbelt Trojan.Win32.Agent.lv
Sophos AppLite
Prevx1 Medium Risk Virus
Panda Adware/Popper
NOD32 probably a variant of Win32/Adware.Agent
Microsoft Adware:Win32/InternetSpeedMonitor
McAfee Generic Downloader.s
K7AntiVirus not-a-virus:AdWare.Win32.Agent.lv
Ikarus Trojan-Downloader.Win32.VB.nw
Fortinet Adware/Agent

File System Details

Trojan.Downloader may create the following file(s):
# File Name MD5 Detections
1. Dscp1.exe 50a51eed61fd2102fa40e4c11d88c5e3 62
2. the librarian solomons mine.exe 2e0089142d4a6eeeb9adc6641bebccef 4
3. _OUdescription.exe 50089277efd5ede6572e8c1ebe8a4e85 1
4. toolbar.exe 5c33d977da7c7a767a11639376a8a1ba 1
5. gacineon.exe 72e4a2a95b102f332cf1b56d7f67a53b 1
6. Desktop.sysm 8e47a67630d5202a0b8798b6607c71ed 1
7. aamg.exe 09769bab9b1620c49b8f1c0993779b4d 1
8. duxp.exe d9f83ef353411236472345941d4a5e4e 1
9. gm.exe 39bc09e4f3b9c5707cb4244e8b11c936 0
10. edtcw.dll b88f36ad1b0775aae6b7fca1c667032d 0
11. khfcdcy.dll 91ecfd3124ca508800178d6617b98ae9 0
12. bkodembw.dll 6469160c08dd06de022733cbc085a932 0
13. __c00A3D23.dat 15921705717795e3d347d960648a7755 0
14. nkwglcqf.dll 88c87100ff81f30ed74d30836af37784 0
15. vtkhylcg.dll 08fcb79e0edb4ac8170e9695eed6b03d 0
16. __c005F324.dll c25f593b5530bf2b2ae57bc863049886 0
17. glwlnvmc.dll d21058fefc643161aa689da2a92f87a2 0
18. zoxboi.dll f08944879e6175a0de8f6541913c01d4 0
19. __c00C0CD.dat 0545294a912933a0e292c0850955d1ce 0
20. laf1.exe 70cbe5a52541325d441f0a250a1ccea4 0
21. ms1.exe af79de8a3240ddad3c7873d4bb094d0a 0
22. svchosts.exe 7b69c00ba9f072dd06d61411fc09ded5 0
23. mc-0-0-0.exe 6b9e1479a7de17344efed6df5d69b322 0
24. b124.exe 4c9ecfc80b5a7b024efd9ac1b781e124 0
25. winsys3.exe cdcf60fad1b3cc2d9a3028b6f1082e53 0
26. {b91413db-d88a-a499-2661-f9f9441c9f46}.dll 8e118ebe8cc3ddea1f5920d5bd6b4489 0
27. 221433eve.dll 63cb4fe68dd3b535fd9880ee96d5dc24 0
28. psvmon9.exe 10c8cb9843e73c1579b7fcd8c4a6fd4a 0
29. file.exe dce9b8c6493d477b86b1b4b9d3791eb1 0
More files

Registry Details

Trojan.Downloader may create the following registry entry or registry entries:
CLSID
{c2680e10-1655-4a0e-87f8-4259325a84b7}
{e9306072-417e-43e3-81d5-369490beef7c}
Run keys
ms