Adware

What is “Adware.Bundler”?

Malware Removal

The Adware.Bundler is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Bundler virus can do?

  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Adware.Bundler?


File Info:

crc32: 25E27171
md5: bb501d575639da0ee4825ae42aad658c
name: BB501D575639DA0EE4825AE42AAD658C.mlw
sha1: 7363d22866ad9cdb6cf843b1a9cdac457fd63039
sha256: 403f9102e3359354d5cf563e6e5b5ecf07f1671c3825c98f83b8346c660ca8cb
sha512: 094c5bcddfaf317a141069805b07e43f4fcb6cba659f4c777de229ff33bcdc263660d4856613c19f2b3b095ffc772ecbfc63ba1815b3b5a88e3a3ff0dcc3a6ad
ssdeep: 1536:BRyfWkhqq2WNUZWlbXu8aXr6jqY6NQJxYsWxzcdQpNCUAUZ9Y:xWNU0F+/Xrcqzwx1QpNCEZa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017
InternalName: NewTempl.exe
FileVersion: 1.0.0.1
CompanyName: TODO:
ProductName: TODO:
ProductVersion: 1.0.0.1
FileDescription: TODO:
OriginalFilename: NewTempl.exe
Translation: 0x0419 0x04b0

Adware.Bundler also known as:

K7AntiVirusTrojan ( 00506f191 )
ALYacGen:Variant.ClipBanker.215
CylanceUnsafe
SangforTrojan.Win32.Kryptik.1
K7GWTrojan ( 00506f191 )
Cybereasonmalicious.75639d
BaiduWin32.Trojan.Kryptik.bhs
SymantecML.Attribute.HighConfidence
AvastFileRepMalware
BitDefenderGen:Variant.ClipBanker.215
MicroWorld-eScanGen:Variant.ClipBanker.215
TencentWin32.Trojan.Symmi.Pgmi
Ad-AwareGen:Variant.ClipBanker.215
BitDefenderThetaGen:NN.ZexaF.34790.iC0@aGXiJhkk
VIPREAdware.InstCap
McAfee-GW-EditionBehavesLike.Win32.Generic.ct
FireEyeGeneric.mg.bb501d575639da0e
EmsisoftGen:Variant.ClipBanker.215 (B)
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.22CBA59
MicrosoftProgram:Win32/Wacapew.C!ml
GDataGen:Variant.ClipBanker.215
AhnLab-V3PUP/Win32.StartSurf.R194427
McAfeeAdware-InstCap
MAXmalware (ai score=99)
MalwarebytesAdware.Bundler
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.A83A (CLASSIC)
IkarusPUA.Bundler.iStartSurf
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/InstCap
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Generic/Trojan.ad5

How to remove Adware.Bundler?

Adware.Bundler removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment