PUA

About “Falco Bundleware (PUA)” infection

Malware Removal

The Falco Bundleware (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Falco Bundleware (PUA) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Falco Bundleware (PUA)?


File Info:

name: 347EB662F5381B15EC9F.mlw
path: /opt/CAPEv2/storage/binaries/ca17e4f22018db6593123273a0bd85a750718613baf288f20fef931b47f49881
crc32: 44152142
md5: 347eb662f5381b15ec9fe0de380023f0
sha1: ed00457802a4ece136689f56f3155335efa39253
sha256: ca17e4f22018db6593123273a0bd85a750718613baf288f20fef931b47f49881
sha512: 8e82d4367bbc968d4334b5ac47dbfc8c6d825c72894fa083942557435aca4c6a72906491c0237c306724ceb64c80cfddc2190c521e960a48ff756a12d8bf01c5
ssdeep: 98304:GlJ6TWwtg7EeQBBRoKsWvcxAA9953R8rREI6G:GloRtgheB6YvA/46JG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19406335273D71076F5250E7084AAC190EE3B3A7415F9B17A2CB8D10E0AFA6D6DC76B23
sha3_384: a08c92959e8710a8b902fb53ac87f662e3e9ba679e62144c781e6f4c62b79b97867fa42fc3d8011c920a6fdd224a9eaf
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2018-06-14 13:27:46

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: FalcoWare, Inc.
FileDescription: Jungle Adventures Setup
FileVersion:
LegalCopyright:
ProductName: Jungle Adventures
ProductVersion:
Translation: 0x0000 0x04b0

Falco Bundleware (PUA) also known as:

BkavW32.AIDetectMalware
CynetMalicious (score: 100)
SangforPUP.Win32.Falco.A
AvastWin32:VSok-A [PUP]
SophosFalco Bundleware (PUA)
IkarusPUA.Falco
VaristW32/FalcoBundler.C.gen!Eldorado
GDataWin32.Application.Falco.A
GoogleDetected
MalwarebytesAdware.RelevantKnowledge
FortinetRiskware/Application
AVGWin32:VSok-A [PUP]
CrowdStrikewin/grayware_confidence_90% (D)

How to remove Falco Bundleware (PUA)?

Falco Bundleware (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment