PUA

Should I remove “Falco Bundleware (PUA)”?

Malware Removal

The Falco Bundleware (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Falco Bundleware (PUA) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Falco Bundleware (PUA)?


File Info:

name: 68AD7FF6F322631F4E89.mlw
path: /opt/CAPEv2/storage/binaries/23bc09d4615795827ad1c80d33d53ab19011ed9f92dc5cb9458f916d65e55093
crc32: 5874885D
md5: 68ad7ff6f322631f4e8923b00b2de84c
sha1: 4993b3518eabcb924cdc8909103e533aa70f2be4
sha256: 23bc09d4615795827ad1c80d33d53ab19011ed9f92dc5cb9458f916d65e55093
sha512: 74b4f0b40bfb653ff712af46ac38d5ba5e938aec2085459a0711939d4d4743230c9be3a82aa7488290554b222d39edf085ede280fb1540a64ee4db9f2c607f98
ssdeep: 6144:ygueHc6tYds5wIa5ja8+888888888888W88888888888W2YOFBG/k2LWDVydbK1N:yaHc64aP888888888888W8888888888U
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13074D043B3D70076F5655E79C87680006D173AB92DF2601E3DB8D60E4ABE6D28C7BB62
sha3_384: 71278a91b3921173f334f782691f6d1ca3e5f3dd1a0cad87e61575f4fd43ad1ee6e1d22d251ba4055f0a58ba028289fd
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2018-06-14 13:27:46

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: FalcoWare, Inc.
FileDescription: RB Setup
FileVersion:
LegalCopyright:
ProductName: RB
ProductVersion:
Translation: 0x0000 0x04b0

Falco Bundleware (PUA) also known as:

BkavW32.AIDetectMalware
SangforTrojan.Win32.Agent.Vi0o
CynetMalicious (score: 100)
AvastWin32:VSok-A [PUP]
SophosFalco Bundleware (PUA)
GDataWin32.Application.Falco.A
Kingsoftmalware.kb.a.971
MalwarebytesAdware.RelevantKnowledge
IkarusPUA.Falco
FortinetRiskware/Application
AVGWin32:VSok-A [PUP]
CrowdStrikewin/grayware_confidence_100% (W)

How to remove Falco Bundleware (PUA)?

Falco Bundleware (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment