How to remove “Application.Bundler.BHM”?

The Application.Bundler.BHM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Bundler.BHM virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Application.Bundler.BHM?


File Info:
crc32: CCADCD66
md5: 254b2ecdc861a435e241d9cdaf29d537
name: 254B2ECDC861A435E241D9CDAF29D537.mlw
sha1: 9192c550393f64fbd9ef2bdd4a1c6f069feb72bf
sha256: 1dc02c76b84cdbc9c0245e7071ad88d44ebdf8fb7ddb22780fb2cdf3947178cf
sha512: 6533f8c6468382119189dee801419157adb872aac2751a13e41a9a68acda5a539763e7489ae5f05831cbf0c5e3c23b36d6b149d0feaf5fda9287e6fd803d915b
ssdeep: 24576:JoPR0L/fk2MMuISG7XOmBTtNNJEpW2lbrfk7q14Tak/RRxmw7Qkl2get:3k2LuISWXXTQpzVrfk7quTak/Pxmhg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 1, 0, 0, 1
ProductVersion: 1, 0, 0, 1
Translation: 0x0804 0x04b0

Application.Bundler.BHM also known as:

K7AntiVirus	Trojan ( 00575d041 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop9.6277
Cynet	Malicious (score: 100)
ALYac	Application.Bundler.BHM
Cylance	Unsafe
Zillya	Tool.YouXun.Win32.346
Sangfor	Trojan.Win32.Bundler.BHM
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:Win32/Ausiv.67701926
K7GW	Trojan ( 00575d041 )
Cybereason	malicious.dc861a
Cyren	W32/S-8630a945!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/RiskWare.YouXun.A
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
BitDefender	Application.Bundler.BHM
NANO-Antivirus	Trojan.Win32.YouXun.fpgycc
MicroWorld-eScan	Application.Bundler.BHM
Ad-Aware	Application.Bundler.BHM
Sophos	Generic PUA JB (PUA)
Comodo	Application.Win32.RiskWare.YouXun.A@84jpnd
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
FireEye	Generic.mg.254b2ecdc861a435
Emsisoft	Application.Bundler.BHM (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Adware.Agent.aiks
eGambit	Unsafe.AI_Score_96%
Antiy-AVL	GrayWare/Win32.Puwaders
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Application.Bundler.BHM
GData	Application.Bundler.BHM
AhnLab-V3	PUP/Win32.Bundler.R244939
Acronis	suspicious
McAfee	GenericRXGM-IQ!254B2ECDC861
MAX	malware (ai score=100)
VBA32	Adware.YouXun
Malwarebytes	RiskWare.YouXun
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@ML.92 (RDMK:Dc8Y9U2xA0B4jgeq+M/duQ)
Yandex	Trojan.GenAsa!QHwxQC+fIYQ
Fortinet	Riskware/YouXun
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Application.Bundler.BHM?

Application.Bundler.BHM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X