Application.Bundler.BCI information

The Application.Bundler.BCI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.Bundler.BCI virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Application.Bundler.BCI?


File Info:
crc32: B4F3F154
md5: 8fe9147315920696529d2b45dd5c7b62
name: downer_6512044-3132553.exe
sha1: 0b2400a1423bafa6b918c80b84d89fef48675690
sha256: a17424c9861fd4b3f6472bf1b8e5519e174e5015f9c7ca7819d05c67f627e03b
sha512: fbfba19b781ccaabc4be000aa8b7731b5cd5c5a7da5b41e0c8a72c1264452f2ed10fb5dcce3381435f360c8e4b27896b336388dc1bca84e3477d803820cf38ae
ssdeep: 24576:v2T9aWflilx1hcvS39LUCPR/OY7e4jsymQsXMdz:vI9nflidlNwCPxOj4jsymQCMdz
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Riyue Tongxing Information Technology (Beijing) Co.,Ltd.
InternalName: 
FileVersion: 1.3.6.26
CompanyName: Riyue Tongxing Information Technology (Beijing) Co.,Ltd.
LegalTrademarks: 
Comments: 
ProductName: downer for windows
ProductVersion: 1.3.6.26
FileDescription: downer for windows
OriginalFilename: downer
Translation: 0x0804 0x03a8

Application.Bundler.BCI also known as:

MicroWorld-eScan	Application.Bundler.BCI
FireEye	Generic.mg.8fe9147315920696
CAT-QuickHeal	Trojan.Donex
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 00544e421 )
BitDefender	Application.Bundler.BCI
K7GW	Riskware ( 00544e421 )
Cybereason	malicious.315920
TrendMicro	PUA.Win32.Donex.GA
F-Prot	W32/Donex.A.gen!Eldorado
ESET-NOD32	a variant of Win32/Gaofenquming.B potentially unwanted
TrendMicro-HouseCall	PUA.Win32.Donex.GA
GData	Application.Bundler.BCI
Kaspersky	not-a-virus:Downloader.Win32.Donex.cz
Alibaba	Downloader:Win32/Donex.679bdc60
NANO-Antivirus	Trojan.Win32.Donex.ewfoyk
ViRobot	Adware.Symmi.913648
Rising	PUA.Downer!8.F658 (CLOUD)
Ad-Aware	Application.Bundler.BCI
Emsisoft	Application.Bundler.BCI (B)
Comodo	Malware@#39s36pzldva9u
F-Secure	Adware.ADWARE/Gaofenq.Gen
DrWeb	Adware.Downware.18662
Zillya	Downloader.Donex.Win32.37
Invincea	heuristic
McAfee-GW-Edition	PUP-XES-UM
SentinelOne	DFI – Malicious PE
Sophos	Downloader (PUA)
APEX	Malicious
Cyren	W32/Donex.A.gen!Eldorado
Jiangmin	Downloader.Donex.ae
MaxSecure	Trojan.Malware.11828310.susgen
Avira	ADWARE/Gaofenq.Gen
Endgame	malicious (moderate confidence)
Arcabit	Application.Bundler.BCI
SUPERAntiSpyware	Adware.ChinAd/Variant
AhnLab-V3	PUP/Win32.Qiwmonk.R215616
ZoneAlarm	not-a-virus:Downloader.Win32.Donex.cz
Microsoft	PUA:Win32/Downer
McAfee	Artemis!8FE914731592
MAX	malware (ai score=99)
VBA32	Downloader.Donex
Malwarebytes	Adware.ChinAd
Panda	Trj/Genetic.gen
Yandex	PUA.Downloader!
Ikarus	PUA.Gaofenquming
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/PUP_XBR
Webroot	Pua.Downloader.Gen
AVG	FileRepMetagen [PUP]
Paloalto	generic.ml

How to remove Application.Bundler.BCI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Application.Bundler.BCI information