Generic.Bunitu.1.2B10CB84 removal instruction

The Generic.Bunitu.1.2B10CB84 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Bunitu.1.2B10CB84 virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Generic.Bunitu.1.2B10CB84?


File Info:
name: C6A2FEF0E56A5D253C36.mlw
path: /opt/CAPEv2/storage/binaries/583522f2e3b3e4e737dc1d7c58594ec7865e03e3b92d020a8b2b4b7afcc9189b
crc32: CCBA60B3
md5: c6a2fef0e56a5d253c368822dfde1f14
sha1: d219341d021681085ea44b9c2bcc93ae96ef7492
sha256: 583522f2e3b3e4e737dc1d7c58594ec7865e03e3b92d020a8b2b4b7afcc9189b
sha512: dc3898e1a8b724516f2edd99157f48b308f1a6802725cf846c9b5c21e1064226f3430016df6eac5f378c3c7f1708c1dd42cdf22276be2feaf8e48ca7a4a6c156
ssdeep: 768:VSK1ZWG3zWdUm9DTmJMo7mMVyVrejF+YTgyto6V:V9Z3KdUmpmJD6JrejF+JMf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T117347C0FD5625EFBDE400D310F3B6B87E867E1215659478B63031420EFE2BAE895A74B
sha3_384: 7d357907e0e2a4e7f02e19b2fa07127499bc2c5921a12d78e75e125071ec8f3342910d830f52d0923ba7b7a456df3d5c
ep_bytes: e803b60300a31e834400e8edb50300a3
timestamp: 2019-02-20 13:25:41

Version Info:
0: [No Data]

Generic.Bunitu.1.2B10CB84 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Bunitu.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.Bunitu.1.2B10CB84
ALYac	Generic.Bunitu.1.2B10CB84
Malwarebytes	Trojan.Bunitu
Zillya	Trojan.Generic.Win32.672332
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Proxy-Program ( 0052568e1 )
Alibaba	Trojan:Win32/Bunitu.2285c247
K7GW	Proxy-Program ( 0052568e1 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Generic.Bunitu.1.2B10CB84
BitDefenderTheta	Gen:NN.ZexaF.36164.amW@aeV5xvi
Cyren	W32/ABRisk.VAED-3443
Symantec	Downloader
tehtris	Generic.Malware
APEX	Malicious
ClamAV	Win.Malware.Bunitu-6874812-0
Kaspersky	HEUR:Trojan.Win32.Bunitu.gen
BitDefender	Generic.Bunitu.1.2B10CB84
MicroWorld-eScan	Generic.Bunitu.1.2B10CB84
Avast	Win32:TrojanX-gen [Trj]
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Banker1.30089
VIPRE	Generic.Bunitu.1.2B10CB84
TrendMicro	TROJ_GEN.R002C0PAL23
McAfee-GW-Edition	GenericRXHV-PY!C6A2FEF0E56A
Emsisoft	Generic.Bunitu.1.2B10CB84 (B)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.Win32.Bunitu.gen
GData	Generic.Bunitu.1.2B10CB84
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R280402
McAfee	GenericRXHV-PY!C6A2FEF0E56A
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PAL23
Rising	Trojan.Bunitu!1.D0D3 (CLASSIC)
Ikarus	Trojan-Proxy.Agent
Fortinet	W32/PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Generic.Bunitu.1.2B10CB84?

Generic.Bunitu.1.2B10CB84 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X