PUA

Falco Bundleware (PUA) removal instruction

Malware Removal

The Falco Bundleware (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Falco Bundleware (PUA) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Falco Bundleware (PUA)?


File Info:

name: 20219203D7537ED82923.mlw
path: /opt/CAPEv2/storage/binaries/bd3c519ecd022ea055da1e5a821bdb58354392eb80612d50a45e28763f10ff57
crc32: 7B481426
md5: 20219203d7537ed829238a94c52d0713
sha1: 0e160e8ff0f4329b24192aa37c649e6f17bd33d5
sha256: bd3c519ecd022ea055da1e5a821bdb58354392eb80612d50a45e28763f10ff57
sha512: 98e6b8a9030da389aa0114558232220f934de75f30d033aa681697d6e1ce88d0b685b2184767993a238679178e69267cc94ce48014f5a2d370db6bfef47ec856
ssdeep: 98304:U1QTNM4Qt+I+I7vFbpjS9DW0VUzp6prHJ9JRoNO20v:AmM4Qt+u7NtSv9J4O3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T185060127B298A53FD49E273505B3A05068FBB6ADF416BE1676F0C48CCF221C11E3E665
sha3_384: 5084896c27c663c2a42b67d5e7597d43240f9f4aa525f47c2e8e9c83b205aa95f9b1174c35ae06306a88b4cd085f9444
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2019-10-12 11:15:57

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: FalcoWare, Inc.
FileDescription: Falco Corners Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: Falco Corners
ProductVersion:
Translation: 0x0000 0x04b0

Falco Bundleware (PUA) also known as:

BkavW32.AIDetectMalware
LionicAdware.Win32.Falco.2!c
Cylanceunsafe
SangforPUP.Win32.Agent.V5ke
CrowdStrikewin/grayware_confidence_100% (W)
K7GWRiskware ( 00584baa1 )
K7AntiVirusRiskware ( 00584baa1 )
AvastWin32:Adware-gen [Adw]
SophosFalco Bundleware (PUA)
IkarusPUA.Falco
Antiy-AVLGrayWare[AdWare]/Win32.Falco.a
MicrosoftPUA:Win32/Presenoker
GDataWin32.Application.Falco.A
VaristW32/FalcoBundler.B.gen!Eldorado
MalwarebytesAdware.RelevantKnowledge
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetRiskware/Application
AVGWin32:Adware-gen [Adw]
DeepInstinctMALICIOUS

How to remove Falco Bundleware (PUA)?

Falco Bundleware (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment