Malware

Application.Bundler.ICLoader.5.Gen (B) removal guide

Malware Removal

The Application.Bundler.ICLoader.5.Gen (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Bundler.ICLoader.5.Gen (B) virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Queries information on disks, possibly for anti-virtualization
  • Detects the presence of Wine emulator via registry key

Related domains:

ec2-52-29-33-28.eu-central-1.compute.amazonaws.com

How to determine Application.Bundler.ICLoader.5.Gen (B)?


File Info:

crc32: 9B0153FE
md5: ebfd63128665a00665bee31c0726b038
name: EBFD63128665A00665BEE31C0726B038.mlw
sha1: f0678586b448024fd4bf2785eb4ee3d6504bcc26
sha256: 1a5d8d66a3e092b532ec8cedac7e1bbfaa341ff59ee8e6454d35b6a04670f21d
sha512: 23c6d0a94121c9e3edeae1e954862b805a76d1a9c8b12fde1e353f5ff141d40361a97f354aea718ada0ae3eb1c96d24cbb2a9b7ad9f27a9801b4baf7ef0270e3
ssdeep: 49152:twJMy3G6cXPGct4YXTe5VhKFjA2+KC+lRa:twJMy3VEPGctI5wjA2+Kjfa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2005-2017 Piriform Ltd
InternalName: sd.exe
FileVersion: 6.33.0.6130
CompanyName: SudoSoft
ProductName: CCleaner
ProductVersion: 6.33.0.6130
FileDescription: CCleaner
OriginalFilename: sd.exe
Translation: 0x0409 0x04b0

Application.Bundler.ICLoader.5.Gen (B) also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005231c11 )
Elasticmalicious (high confidence)
DrWebTrojan.InstallCube.2551
CynetMalicious (score: 100)
CAT-QuickHealSwBundler.ICLoader.YB5
ALYacApplication.Bundler.ICLoader.5.Gen
ZillyaTrojan.Generic.Win32.169221
SangforTrojan.Win32.Save.a
K7GWTrojan ( 005231c11 )
Cybereasonmalicious.28665a
CyrenW32/S-6cf4b1ed!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GBIH
APEXMalicious
AvastWin32:DangerousSig [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderApplication.Bundler.ICLoader.5.Gen
NANO-AntivirusTrojan.Win32.InstallCube.ewsyqb
MicroWorld-eScanApplication.Bundler.ICLoader.5.Gen
TencentMalware.Win32.Gencirc.114cee2d
Ad-AwareApplication.Bundler.ICLoader.5.Gen
SophosMal/Generic-S
ComodoTrojWare.Win32.Crypt.B@7o6bny
McAfee-GW-EditionGenericRXEO-DM!EBFD63128665
FireEyeGeneric.mg.ebfd63128665a006
EmsisoftApplication.Bundler.ICLoader.5.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.gxvae
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_71%
Antiy-AVLTrojan/Generic.ASMalwS.23E878B
MicrosoftPUADlManager:Win32/InstallCube
ArcabitApplication.Bundler.ICLoader.5.Gen
ZoneAlarmHEUR:Packed.Win32.Katusha.gen
GDataApplication.Bundler.ICLoader.5.Gen
AhnLab-V3PUP/Win32.ICLoader.R217745
Acronissuspicious
McAfeeGenericRXEO-DM!EBFD63128665
MAXmalware (ai score=94)
VBA32Trojan.InstallCube
MalwarebytesAdware.FileTour
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.AFA6 (CLASSIC)
YandexTrojan.GenAsa!Je9diD4rCqY
IkarusPUA.FileTour
MaxSecureAdware.WIN32.AdWare.Generic_212245
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml

How to remove Application.Bundler.ICLoader.5.Gen (B)?

Application.Bundler.ICLoader.5.Gen (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment