Malware

Application.Bundler.BOZ removal

Malware Removal

The Application.Bundler.BOZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Bundler.BOZ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
trick.matchoatmeal.icu
fuss.wavesfork.online
a.tomx.xyz

How to determine Application.Bundler.BOZ?


File Info:

crc32: 088E357F
md5: 27221e4ba15050b3a5873c851fcc6a1d
name: 27221E4BA15050B3A5873C851FCC6A1D.mlw
sha1: d4d567ad1544ee01d9e15d86c0a1cd5d8e91e214
sha256: 5ed7183b06968e904243111a4cb33d832f9ef85bf06f3ad218a926391301e6df
sha512: ee6e47a1524254836e50db8ba3453e26e8d5a50bf324d9ad538d49e31ed5c11f5d38fa639b86f010a2253c9b718e7ce387df75a49dc44ff391c485a75c7b0c94
ssdeep: 24576:EoxJlU+8s+SI9i3Nhw7KtsQnefSyXRkdR8Nz720tLqvxbY28+jfMB:EoxJlUtYNhzsL/xx7hqvxbY3B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Lcel
InternalName: ECAH.EXE
FileVersion: 1.6.0.6
CompanyName: xa9Lcel
ProductName: ECAH
ProductVersion: 1.6.0.6
OriginalFilename: ecah.exe
Translation: 0x0409 0x04e4

Application.Bundler.BOZ also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005400221 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17914
CynetMalicious (score: 100)
ALYacApplication.Bundler.BOZ
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaAdWare:Win32/StartSurf.e1427b63
K7GWTrojan ( 005400221 )
Cybereasonmalicious.ba1505
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GMCR
APEXMalicious
AvastWin32:LoadMoney-ATT [Adw]
Kasperskynot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
BitDefenderApplication.Bundler.BOZ
NANO-AntivirusTrojan.Win32.Vittalia.fjxeoy
MicroWorld-eScanApplication.Bundler.BOZ
TencentMalware.Win32.Gencirc.10cd48e6
Ad-AwareApplication.Bundler.BOZ
SophosIStartSurfInstaller (PUA)
BitDefenderThetaGen:NN.ZexaF.34236.BD0@au8zWYli
McAfee-GW-EditionBehavesLike.Win32.Packed.th
FireEyeGeneric.mg.27221e4ba15050b3
EmsisoftApplication.Bundler.BOZ (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.StartSurf.rpu
AviraTR/Crypt.ZPACK.Gen
eGambitUnsafe.AI_Score_74%
Antiy-AVLTrojan/Generic.ASMalwS.28EFF9E
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitApplication.Bundler.BOZ
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
GDataApplication.Bundler.BOZ
AhnLab-V3PUP/Win32.Bundler.R244166
Acronissuspicious
McAfeePacked-FKC!27221E4BA150
MAXmalware (ai score=76)
VBA32BScope.Adware.StartSurf
MalwarebytesTrojan.IStartSurf
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexPUA.StartSurf!lGyYyLwDi7Q
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GLWA!tr
AVGWin32:LoadMoney-ATT [Adw]
Paloaltogeneric.ml

How to remove Application.Bundler.BOZ?

Application.Bundler.BOZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment