Application.Musrch.A removal tips

The Application.Musrch.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Musrch.A virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to create or modify a Browser Helper Object

How to determine Application.Musrch.A?


File Info:
name: FC69200A7E58FB5E5979.mlw
path: /opt/CAPEv2/storage/binaries/01ad035bcfb9d2a347bcff5a4e10929093a0af8c8a1c928b16e5f4874993d1c7
crc32: DC8B0451
md5: fc69200a7e58fb5e597911c4fa7e4bec
sha1: 1b67fd2b54fc311fe53b693f26c81d29ec34990b
sha256: 01ad035bcfb9d2a347bcff5a4e10929093a0af8c8a1c928b16e5f4874993d1c7
sha512: 666fe90b6e1a5dbe43e26ea2ff71faebfcdb34ffcca16d57f7b1aa8f1b25e9fbff3b7c57cca7f8951863d0c98ab2b9160ebae7b2cc496cfec14f5b90e86d0246
ssdeep: 1536:O+eijc54pl+rnV0FbE/41ycMwuuTKG+OqhOj0boOGG:BeijE4piV02kyc29QjSoOGG
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T187839F1132E581F7D0DA413126664B269FBFAC300EFA4453DF6B3A4E2C70593A72A31B
sha3_384: 1de17dd85333c80a21f5e6ad618ffd03f0277a5e611a7ec3991933b6c9c5678abccb857fa991d7ecffa8405cd5efdb18
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2005-06-06 02:43:22

Version Info:
Comments: 
CompanyName: 
FileDescription: WebPlug Module
FileVersion: 1, 0, 0, 2
InternalName: WebPlug
LegalCopyright: Copyright 2005
LegalTrademarks: 
OLESelfRegister: 
OriginalFilename: WebPlug.DLL
PrivateBuild: 
ProductName: WebPlug Module
ProductVersion: 1, 0, 0, 2
SpecialBuild: 
Translation: 0x0409 0x04b0

Application.Musrch.A also known as:

Bkav	W32.Common.2D89E198
Lionic	Adware.Win32.Musrch.2!c
MicroWorld-eScan	Application.Musrch.A
FireEye	Generic.mg.fc69200a7e58fb5e
Skyhigh	BehavesLike.Win32.Dropper.mt
McAfee	Musrch
VIPRE	Application.Musrch.A
Sangfor	Adware.Win32.Musrch.V99e
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	AdWare:Win32/OnlineGames.0916f553
BitDefenderTheta	Gen:NN.ZedlaF.36802.fy8@aWRZ3Dpb
Symantec	Adware.BeSys
Elastic	malicious (high confidence)
APEX	Malicious
BitDefender	Application.Musrch.A
Avast	Win32:Adware-gen [Adw]
Sophos	Generic Reputation PUA (PUA)
Emsisoft	Application.Musrch.A (B)
Google	Detected
Varist	W32/OnlineGames.EV.gen!Eldorado
Antiy-AVL	Trojan/Win32.Generic
Kingsoft	Win32.Troj.Unknown.a
Microsoft	Program:Win32/Wacapew.C!ml
Xcitium	Malware@#17dis5zm4yt3x
Arcabit	Application.Musrch.A
GData	Application.Musrch.A
Cynet	Malicious (score: 100)
ALYac	Application.Musrch.A
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Bck/BESys.B
Rising	Trojan.Win32.Generic.134EB1D5 (C64:YzY0OnL+rfKiIFU8)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.234390973.susgen
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS

How to remove Application.Musrch.A?

Application.Musrch.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X