Downloader.Win32.InnoBundle.avzg removal

The Downloader.Win32.InnoBundle.avzg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.Win32.InnoBundle.avzg virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the shellcode patterns malware family
• Deletes executed files from disk
• Yara detections observed in process dumps, payloads or dropped files

How to determine Downloader.Win32.InnoBundle.avzg?

File Info:
name: 87C66479E1E2FE04981F.mlw
path: /opt/CAPEv2/storage/binaries/2f9f182bf6e472149713659ebb163ac51d4af56c593c4ea047e411a61ca8eaf2
crc32: 3108CB57
md5: 87c66479e1e2fe04981f4dedca01a2ca
sha1: c6f177153d81bcbb02f0c8ad1a0d9ff87c94cdfc
sha256: 2f9f182bf6e472149713659ebb163ac51d4af56c593c4ea047e411a61ca8eaf2
sha512: d04b8732f405d2f44d8bce386c270c49614b6f17c49de4fb771f89154f0d4dd1d012f0142efd49cfaa563b4ab6a443ce9245e46028829e8aeaeec1c6dedbe655
ssdeep: 196608:XandB6WWT9kv8diDz7pJoKym4/wzyqpKbMcMd9YVT:Xo6Wey0CnRdEqcbMcMDQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17E961237F92AA07FCA0D377ADE674766443B5E0479205C2F03F4384A6F225549A2E62F
sha3_384: 1329fe405fff5eb22e7876d6e9def67db0ac4034550487c7e35c39b58065943b77a01246138580a4d6bac92ce8814447
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2020-11-15 09:48:30

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: PuntoSwitcher Setup                                         
FileVersion: 4.4.4.489           
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: PuntoSwitcher                                               
ProductVersion: 4.4.4.489                                         
Translation: 0x0000 0x04b0

Downloader.Win32.InnoBundle.avzg also known as:

How to remove Downloader.Win32.InnoBundle.avzg?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.