W32/Adload.Ma.Downloader is a Trojan that will infect Windows systems.

The Trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution, it drops as SystemDefender.exe in the Program Files folder.


It modifies the registry at the following location to ensure its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Technical details can be found at this Proland Software page.