Bundpil.Worm.AutoRun.DDS malicious file

The Bundpil.Worm.AutoRun.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bundpil.Worm.AutoRun.DDS virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Bundpil.Worm.AutoRun.DDS?


File Info:
name: 1DC575DDCEF922C8FDCE.mlw
path: /opt/CAPEv2/storage/binaries/cde6adb4b6262b17aad5b05bf4d16f0f864a2d1d800b6919dd2b38a9c7f71457
crc32: 32D5C3D8
md5: 1dc575ddcef922c8fdce24ae225a783a
sha1: 26517197c423fd652345f49bac58ae6efb2b7a15
sha256: cde6adb4b6262b17aad5b05bf4d16f0f864a2d1d800b6919dd2b38a9c7f71457
sha512: 6409b611825948e89facea0ffd15a0ed901a8c8dcbe265c9dc8452144c889809f02deff2021742f6c60e559399e46cc81a0420015b301b6224c6ea2c169cafc8
ssdeep: 48:CCy86+Wet9Q/iooHeiefhe+/lSMYEqIcatI63sKyabTyKg5VR4+RgPOetqMn91qj:hy859x0P8MaANB/g5PSxd9Ur
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A1C180492341CE7BDF0807F9CE872859E86FEC09EE3549A5A3C46E1531E8F6D17C0A81
sha3_384: ac1f156df676a3a89b19185ddf91fcfc9408610ffc7282a8bea1d6f5712f12721affeb2731453c56022ccddb9dfd9027
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2013-06-12 12:49:36

Version Info:
0: [No Data]

Bundpil.Worm.AutoRun.DDS also known as:

Bkav	W32.FamVT.DebrisA.Worm
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Barys.381598
CAT-QuickHeal	Trojan.Agent.WL
Skyhigh	BehavesLike.Win32.Worm.zt
McAfee	W32/Worm-FJV!1DC575DDCEF9
Malwarebytes	Bundpil.Worm.AutoRun.DDS
VIPRE	Gen:Variant.Barys.381598
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Worm.Bundpil.y
VirIT	Worm.Win32.Generic.GRN
Symantec	Downloader.Dromedan
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Adware.Downware-251
NANO-Antivirus	Trojan.Win32.Debris.cqkxyu
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Avast	Win32:Sg-I [Trj]
Tencent	Worm.Win32.Debris.c
Zillya	Worm.DebrisGen.Win32.11
Emsisoft	Gen:Variant.Barys.381598 (B)
Ikarus	Worm.Win32.Bundpil
Jiangmin	Trojan/Generic.axdgt
Webroot	W32.Worm.Gen
Avira	WORM/Gamarue.511265
Antiy-AVL	Worm/Win32.Debris
Kingsoft	malware.kb.a.998
Xcitium	Worm.Win32.Bundpil.AH@4yjufs
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win32.Debris.R71328
ALYac	Gen:Variant.Barys.381598
Cylance	unsafe
Panda	Generic Malware
Rising	Worm.Gamarue!1.9CB3 (CLASSIC)
Yandex	Trojan.GenAsa!VJN5611Pa6Y
SentinelOne	Static AI – Malicious PE
MaxSecure	Worm.Debris.Gen
Fortinet	W32/Bundpil.AO!tr
AVG	Win32:Sg-I [Trj]
DeepInstinct	MALICIOUS

How to remove Bundpil.Worm.AutoRun.DDS?

Bundpil.Worm.AutoRun.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X