Threat Database Trojans Win32/DownloadAdmin.G

Win32/DownloadAdmin.G

By Domesticus in Trojans

Threat Scorecard

Ranking: 1,966
Threat Level: 10 % (Normal)
Infected Computers: 19,996
First Seen: April 17, 2013
Last Seen: September 20, 2023
OS(es) Affected: Windows

Win32/DownloadAdmin.G is a virus that is related to rootkits. Win32/DownloadAdmin.G is difficult to detect and uninstall by many anti-virus software. Win32/DownloadAdmin.G downloads other malware infections on the infected computer, such as spyware, adware, Trojans, and many other. Win32/DownloadAdmin.G can install it partially or in fill as it executes the loads with compromised Administrator's authorizations. Win32/DownloadAdmin.G may take over the hijacked Internet browser and lead to unwanted diversions to doubtful websites. Win32/DownloadAdmin.G may show disturbing pop-up advertisements while the target PC user is browsing the web.

Aliases

1 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Generic.B09

SpyHunter Detects & Remove Win32/DownloadAdmin.G

File System Details

Win32/DownloadAdmin.G may create the following file(s):
# File Name MD5 Detections
1. UpdateAdmin.exe 716f86364ccebb506308ab8cbec238b3 8
2. UpdateAdmin.exe a2626b7668c0058fed2731b240f7a2ab 3

Registry Details

Win32/DownloadAdmin.G may create the following registry entry or registry entries:
File name without path
http_www.downloadadmin.com_0.localstorage
http_www.downloadadmin.com_0.localstorage-journal
service.updateadmin[1].xml
www.downloadadmin[1].xml
SOFTWARE\Classes\Installer\Features\45B71F1875D5E58488CC6F2DD0665B0E
SOFTWARE\Classes\Installer\Features\5C59CF75147BC96468703BC9CE248342
SOFTWARE\Classes\Installer\Products\45B71F1875D5E58488CC6F2DD0665B0E
SOFTWARE\Classes\Installer\Products\5C59CF75147BC96468703BC9CE248342
SOFTWARE\Classes\Installer\UpgradeCodes\E71AAEE8659CC5148A67A8122969D921
Software\DownloadAdmin
Software\Escolade
Software\Microsoft\Internet Explorer\DOMStorage\downloadadmin.com
Software\Microsoft\Internet Explorer\DOMStorage\service.updateadmin.com
Software\Microsoft\Internet Explorer\DOMStorage\updateadmin.com
Software\Microsoft\Internet Explorer\DOMStorage\www.downloadadmin.com
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UpdateAdmin
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\E71AAEE8659CC5148A67A8122969D921
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\UpdateAdmin
{07B4B423-E4DA-47D1-8327-B589EB4BEB58}
{2DDF4FAF-F9ED-4D76-BB6C-29027CE4202C}
{57FC95C5-B741-469C-8607-B39CEC423824}
{81F17B54-5D57-485E-88CC-F6D20D66B5E0}
{8F1CD30B-3A84-4B95-BFA4-CC0F885B8463}

Directories

Win32/DownloadAdmin.G may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\UpdateAdmin
%ALLUSERSPROFILE%\Start Menu\Programs\UpdateAdmin
%APPDATA%\Microsoft\Windows\Start Menu\Programs\UpdateAdmin
%LOCALAPPDATA%\UpdateAdmin
%USERPROFILE%\Local Settings\Application Data\UpdateAdmin

Trending

Most Viewed

Loading...