Malware

Application.Bundler.AXU information

Malware Removal

The Application.Bundler.AXU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Bundler.AXU virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Application.Bundler.AXU?


File Info:

name: 318051D521080B1A3B0E.mlw
path: /opt/CAPEv2/storage/binaries/45c9575571ab2b3b5b938b7c3d0b7522bd616605889d73bee1898b0340ebb249
crc32: B4969336
md5: 318051d521080b1a3b0ebba242cd1c7d
sha1: 376d47d007157a8c9847475960d5c7f9d7d89468
sha256: 45c9575571ab2b3b5b938b7c3d0b7522bd616605889d73bee1898b0340ebb249
sha512: 323a6ea41379a226f4f718cac6e9eced10ebb306c193132aa107d537ba02bc1987c39c5dff304b41844939c8f4c77354bbb6d0fd3c63f0c0c7d5c099cefdd425
ssdeep: 12288:V8Fykeb7NUhXYtT29MZaJq3a/aHx0fJgkrvR8c0p/CfV:V7keb7NRaA3ayHfkrKcdf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T155B51200B4C0C4B2E9B54D7268A58E1567BD74440F28AEEF27CC2AFD5F386C1953AA37
sha3_384: 57e6a3113f0ac09f12aeaeb48021e4c2945873f851223c99d881664f70ad42b67721d89d16939ff805da87d3bef5c7a0
ep_bytes: e890030000e98efeffff558bec6a00ff
timestamp: 2018-05-27 14:49:14

Version Info:

0: [No Data]

Application.Bundler.AXU also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Bundler.4!c
MicroWorld-eScanApplication.Bundler.AXU
FireEyeGeneric.mg.318051d521080b1a
SkyhighBehavesLike.Win32.Generic.vz
McAfeeGenericRXFO-OD!318051D52108
MalwarebytesCrypt.Trojan.Malicious.DDS
VIPREApplication.Bundler.AXU
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005376ad1 )
AlibabaTrojan:Win32/Kryptik.5bc3e7fc
K7GWTrojan ( 005376ad1 )
Cybereasonmalicious.007157
SymantecAdware.IstartSurf
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.GHDF
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderApplication.Bundler.AXU
NANO-AntivirusTrojan.Win32.Vittalia.fcszck
AvastWin32:StartSurf-C [Adw]
TencentMalware.Win32.Gencirc.10b192ef
SophosGeneric Reputation PUA (PUA)
F-SecureHeuristic.HEUR/AGEN.1317740
DrWebTrojan.Vittalia.17183
TrendMicroTROJ_GEN.R002C0PB724
Trapminemalicious.high.ml.score
EmsisoftApplication.Bundler.AXU (B)
SentinelOneStatic AI – Malicious PE
GDataApplication.Bundler.AXU
JiangminTrojan.Generic.cdqdk
WebrootPua.Adware.Gen
GoogleDetected
AviraHEUR/AGEN.1317740
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.TSGeneric
KingsoftWin32.Trojan.Generic.a
XcitiumApplication.Win32.Prepscram.AC@7mz6ir
ArcabitApplication.Bundler.AXU
ViRobotAdware.Vittalia.2482176.DR
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftSoftwareBundler:Win32/Prepscram
VaristW32/S-891c2261!Eldorado
AhnLab-V3PUP/Win32.DlHelper.R229757
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36744.xAW@aeolfAoi
ALYacApplication.Bundler.AXU
VBA32BScope.AdWare.StartSurf
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PB724
RisingTrojan.Kryptik!1.B2AA (CLASSIC)
YandexTrojan.GenAsa!1Y67OYwkJA8
IkarusPUA.Bundler.iStartSurf
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GFGF!tr
AVGWin32:StartSurf-C [Adw]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Application.Bundler.AXU?

Application.Bundler.AXU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment