Malware

Application.Bundler.AUS removal instruction

Malware Removal

The Application.Bundler.AUS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Bundler.AUS virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
midnigntstranger.top
ec2-176-34-154-135.eu-west-1.compute.amazonaws.com
a.tomx.xyz
www.bing.com

How to determine Application.Bundler.AUS?


File Info:

crc32: 3B5AEF32
md5: 7518e0819e8557a62a523d79c6767503
name: 7518E0819E8557A62A523D79C6767503.mlw
sha1: bce270ab6eb6e7d6c146c76b11bc9e7bea381383
sha256: 5b3b4e3d8c37a46a05e16e6771b8f4bb261e501214c8a63198ea51eb6a8f06cd
sha512: 2671ed7313681082a6dc3da0ab9b501692b432ad281f19e44f0f535b67870d8d7055b538ae48e2a4bd32f0177d1665b6a1b2205166daac76eb72ffe14d615ca5
ssdeep: 24576:22kKf86kYoOXje+Dpy8LZnuhQSqAibOnC5E4rJ3vyDuQ5q3h3gJ:2oRvLZnAQfAkOnCGb
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Application.Bundler.AUS also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.a!c
Elasticmalicious (high confidence)
DrWebTrojan.InstallMonster.2565
MicroWorld-eScanApplication.Bundler.AUS
McAfeeArtemis!7518E0819E85
CylanceUnsafe
ZillyaTrojan.Inject.Win32.244315
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan-Downloader ( 00522dce1 )
K7AntiVirusTrojan-Downloader ( 00522dce1 )
CyrenW32/Tovkater.I.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Tovkater.IE
APEXMalicious
AvastWin32:Adware-gen [Adw]
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Inject.aifwd
BitDefenderApplication.Bundler.AUS
NANO-AntivirusRiskware.Win32.TOVus.exmklj
TencentMalware.Win32.Gencirc.10b0d4a3
Ad-AwareApplication.Bundler.AUS
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34170.VnJfaytewaoi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionTrojan-FPDH!6612099D2D06
FireEyeGeneric.mg.7518e0819e8557a6
EmsisoftApplication.Bundler.AUS (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Generic.azeb
AviraTR/Crypt.XPACK.Gen7
Antiy-AVLTrojan/Generic.ASMalwS.255A2A3
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmHEUR:Trojan-Downloader.Win32.Generic
GDataApplication.Bundler.AUS
VBA32Adware.TOVus
MAXmalware (ai score=75)
MalwarebytesMalware.AI.31909473
YandexTrojan.GenAsa!IfHHhlWz+uA
IkarusTrojan-Downloader.Win32.Tovkater
FortinetW32/Tovkater.IE!tr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Application.Bundler.AUS?

Application.Bundler.AUS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment