Malware

Application.Bundler.InstallMonster.ADP removal

Malware Removal

The Application.Bundler.InstallMonster.ADP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Bundler.InstallMonster.ADP virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Sniffs keystrokes
  • Executed a process and injected code into it, probably while unpacking
  • Detects the presence of Wine emulator via function name
  • Queries information on disks, possibly for anti-virtualization
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Collects information about installed applications
  • Creates a hidden or system file
  • Checks the presence of disk drives in the registry, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key

Related domains:

artistrun.top
betheones.top

How to determine Application.Bundler.InstallMonster.ADP?


File Info:

crc32: 9630A962
md5: 2edec6effb88c5a69f33692f807df5d3
name: 2EDEC6EFFB88C5A69F33692F807DF5D3.mlw
sha1: 71d983abdd19958c9edb167015001244832a6b9c
sha256: dcbb535639f78479113c32d32c9b1f1f3ab87bee6a6eb82c79600374ac998322
sha512: 9ad8747d171f30d8eef6497296c2b4bd132063d9161c373996ebaa1e917c0d55146247ef58b5a2b8e0fae845de3337eb6ac1a2b839b138fc5ed649d17e041baf
ssdeep: 49152:LDlmnvKHZ4/j3Eo/ic5HhKh/DpDtqZhJ6TQLcB+mulWC99fBAc0Hx:LgvK54/jUo6gBitqZhIEcB+vWCfBkx
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Application.Bundler.InstallMonster.ADP also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanApplication.Bundler.InstallMonster.ADP
FireEyeGeneric.mg.2edec6effb88c5a6
CAT-QuickHealTrojan.Resoric.ZZ11
McAfeeArtemis!2EDEC6EFFB88
VIPRETrojan.Win32.Generic!BT
K7AntiVirusAdware ( 00529c641 )
BitDefenderApplication.Bundler.InstallMonster.ADP
K7GWAdware ( 00529c641 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/InstallMonster.JN.gen!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Adware-gen [Adw]
KasperskyHEUR:Trojan.Win32.Inject.gen
NANO-AntivirusTrojan.Win32.InstallMonster.evrlju
RisingAdware.InstallMonstr!1.A4E6 (CLASSIC)
Ad-AwareApplication.Bundler.InstallMonster.ADP
SophosInstall Monster (PUA)
ComodoApplication.Win32.InstallMonster.UM@7eww7i
F-SecureAdware.ADWARE/InstMonster.Gen7
DrWebTrojan.InstallMonster.2398
ZillyaAdware.DLBoost.Win32.3379
TrendMicroHT_INSTALLMONSTR_GL07001F.UVPM
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
EmsisoftApplication.Bundler.InstallMonster.ADP (B)
IkarusPUA.Installmonstr
JiangminTrojan.Inject.acyt
AviraADWARE/InstMonster.Gen7
MAXmalware (ai score=75)
Antiy-AVLTrojan/Win32.Inject
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitApplication.Bundler.InstallMonster.ADP
ZoneAlarmHEUR:Trojan.Win32.Inject.gen
GDataApplication.Bundler.InstallMonster.ADP
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.InstallMonster.R215052
Acronissuspicious
VBA32Trojan.Inject
ALYacApplication.Bundler.InstallMonster.ADP
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/InstallMonstr.UM potentially unwanted
TrendMicro-HouseCallHT_INSTALLMONSTR_GL07001F.UVPM
TencentMalware.Win32.Gencirc.10b0c67f
YandexTrojan.GenAsa!9aa24zRqoSw
SentinelOneStatic AI – Malicious PE – Installer
FortinetW32/Injector.CTWA!tr
BitDefenderThetaAI:Packer.7DBA166E21
AVGWin32:Adware-gen [Adw]
Cybereasonmalicious.ffb88c
Paloaltogeneric.ml

How to remove Application.Bundler.InstallMonster.ADP?

Application.Bundler.InstallMonster.ADP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment