Categories: Worm

Should I remove “MemScan:Worm.Bundpil.B”?

The MemScan:Worm.Bundpil.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MemScan:Worm.Bundpil.B virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MemScan:Worm.Bundpil.B?


File Info:
name: 8341241052BE3F49604A.mlwpath: /opt/CAPEv2/storage/binaries/b797581cffeb254688334479a485173757962301b9861070eacc7a0d0609aabbcrc32: AAEC1EB2md5: 8341241052be3f49604a39285a78799esha1: 9a2523c5bca782b8464a16e6107325e8264568e9sha256: b797581cffeb254688334479a485173757962301b9861070eacc7a0d0609aabbsha512: c13380c800d5ff3fe97301a6b8b6986cbde95e5cdcf528ad7ef5d83173888ec9ccd21afaebf677c6daff9af6edf6683006835db4b75e042e46d491895cabb9cbssdeep: 98304:UdOKU4NN3BG4jXwhBnG2cJzMwvpxQPZ8H1ozbKhMH4T6KA6y:NKZN3YOqn5cJvvkTehSsk6ytype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T189463335F55232EDD4F202B9ECE7B95B4BCA9255C7C17A0F040A6B085F60FA6DB250A3sha3_384: 8f0b8b9ae7e241b3fdba9c0e6d28e0b35bd9863433633118d31a4b3ab3a3146edda6e8662817a777adeb398d07b923cdep_bytes: 558bec538b5d08568b750c578b7d1085timestamp: 2015-02-12 15:24:06
Version Info:
CompanyName: Dynamic Network Services, Inc.FileDescription: CheckoutFileVersion: 109, 10, 120, 249InternalName: CreditsLegalCopyright: Copyright © 2016OriginalFilename: Banished.exeProductName: Ballet CommentariesProductVersion: 76, 222, 21, 172

MemScan:Worm.Bundpil.B also known as:

Bkav	W32.Common.554815D7
Lionic	Trojan.Win32.Waldek.4!c
AVG	Win32:Papras-AV [Trj]
MicroWorld-eScan	MemScan:Worm.Bundpil.B
CAT-QuickHeal	Trojan.Lodbak.WR5
Skyhigh	BehavesLike.Win32.Packed.th
ALYac	MemScan:Worm.Bundpil.B
Cylance	unsafe
VIPRE	MemScan:Worm.Bundpil.B
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/Waldek.4ff2e35d
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Arcabit	Worm.Bundpil.B
Baidu	Win32.Trojan.Kryptik.ack
VirIT	Trojan.Win32.Crypt5.AZCT
Symantec	Packed.Dromedan!gen23
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HMQX
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Coantor-9858572-0
Kaspersky	Trojan.Win32.Waldek.lay
BitDefender	MemScan:Worm.Bundpil.B
NANO-Antivirus	Trojan.Win32.Waldek.fnxhnp
Avast	Win32:Papras-AV [Trj]
Tencent	Malware.Win32.Gencirc.10b590c8
Emsisoft	MemScan:Worm.Bundpil.B (B)
F-Secure	Trojan.TR/Crypt.ZPACK.Gen4
DrWeb	Trojan.Bundpil.8
Zillya	Trojan.Waldek.Win32.3682
TrendMicro	WORM_GAMARUE.SMQB
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.8341241052be3f49
Sophos	Troj/Bundpil-Z
Ikarus	Worm.Win32.Gamarue
Jiangmin	Trojan.Waldek.dds
Webroot	W32.Worm.Gen
Varist	W32/S-72007166!Eldorado
Avira	TR/Crypt.ZPACK.Gen4
Antiy-AVL	Trojan/Win32.Waldek
Xcitium	TrojWare.Win32.Waldek.KEA@81d96v
Microsoft	Worm:Win32/Gamarue
ZoneAlarm	Trojan.Win32.Waldek.lay
GData	Win32.Worm.Gamarue.AJ
Google	Detected
AhnLab-V3	Worm/Win32.Gamarue.R196759
McAfee	Trojan-FHRE!8341241052BE
MAX	malware (ai score=100)
VBA32	Trojan.Waldek
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Gamarue.A
TrendMicro-HouseCall	WORM_GAMARUE.SMQB
Rising	Worm.Gamarue!8.13B (TFE:5:IFc8XowRvOJ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.9350882.susgen
Fortinet	W32/Generic.AC.3401C6!tr
BitDefenderTheta	Gen:NN.ZedlaF.36802.@x@@aaYwr2ai
DeepInstinct	MALICIOUS
alibabacloud	Worm.Win.Gamarue.8709eb8d