MemScan:Worm.Bundpil.B information

The MemScan:Worm.Bundpil.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MemScan:Worm.Bundpil.B virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine MemScan:Worm.Bundpil.B?


File Info:
name: 2F243F4D8E42355B833E.mlw
path: /opt/CAPEv2/storage/binaries/071dc4294b6bcecebb99efc29e5f94b1154c62045ea181e488af3eed850e6a14
crc32: C5C92B8A
md5: 2f243f4d8e42355b833e8972bb6ab940
sha1: 8f10dd20130c082a510756ab90ea3790e6ae7353
sha256: 071dc4294b6bcecebb99efc29e5f94b1154c62045ea181e488af3eed850e6a14
sha512: 01c4bb92c0479d86b84ace22f05eac4c55b41fa32851075bdeca2e146d1f56acb60389ba2661b4a3731f0c971d0cb2a1d0bf6d5325cf9ec73299829fc7c853e7
ssdeep: 98304:bsNffi/cAG0rLTWUw8RCXKujioklHme3KL4bU5bWGtXEMWyK1z18qNPkh:wNf3gTI8CBBklxbOamay418skh
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A2663325F26AB057C0F35AF9EEF7640F0949AB87E90CE52B0828441899D164CF74FAD7
sha3_384: 6d8e0b62300b9135908b4866d92d872dda1f2507a6fd40d19d954f6def5446b3bc1c00e5b0f0dca58e0d12f2e0d213d6
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2006-01-11 05:51:37

Version Info:
CompanyName: CyberLink Corporation.
FileDescription: Monochromatic
FileVersion: 114, 4, 46, 14
InternalName: Passionate
LegalCopyright: Copyright © 2018
OriginalFilename: Mainframe.exe
ProductName: Renovate Norm
ProductVersion: 170, 38, 200, 146

MemScan:Worm.Bundpil.B also known as:

Lionic	Trojan.Win32.Bundpil.4!c
MicroWorld-eScan	MemScan:Worm.Bundpil.B
FireEye	Generic.mg.2f243f4d8e42355b
CAT-QuickHeal	Trojan.Lodbak.WR5
Skyhigh	GenericRXDU-AQ!2F243F4D8E42
McAfee	GenericRXDU-AQ!2F243F4D8E42
Cylance	unsafe
VIPRE	MemScan:Worm.Bundpil.B
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004d3cf31 )
Alibaba	Worm:Win32/Bundpil.ae44bb60
K7GW	Trojan ( 004d3cf31 )
Symantec	Packed.Dromedan!gen23
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Bundpil.DF
TrendMicro-HouseCall	WORM_GAMARUE.SMQB
Paloalto	generic.ml
ClamAV	Win.Worm.Gamarue-9957085-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	MemScan:Worm.Bundpil.B
NANO-Antivirus	Trojan.Win32.Agent.ebefea
Avast	Win32:Papras-AR [Trj]
Tencent	Malware.Win32.Gencirc.10b30355
Emsisoft	MemScan:Worm.Bundpil.B (B)
Google	Detected
F-Secure	Trojan.TR/Taranis.2778
DrWeb	Trojan.Bundpil.8
Zillya	Worm.Bundpil.Win32.126680
TrendMicro	WORM_GAMARUE.SMQB
Sophos	Troj/Bundpil-Z
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.uxqn
Webroot	W32.Worm.Gen
Varist	W32/S-158cba8b!Eldorado
Avira	TR/Taranis.2778
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	Worm:Win32/Gamarue
Arcabit	Worm.Bundpil.B
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Worm.Gamarue.AJ
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Gamarue.R223931
BitDefenderTheta	Gen:NN.ZedlaF.36804.@x@@aqFn31bi
ALYac	MemScan:Worm.Bundpil.B
MAX	malware (ai score=87)
VBA32	BScope.Trojan.Bundpil
Malwarebytes	Worm.Gamarue
Panda	Trj/Gamarue.A
Rising	Worm.Gamarue!8.13B (TFE:5:IAbzlZIc2mU)
Yandex	Trojan.Waldek!ZQ3tu92Q460
Ikarus	Worm.Win32.Bundpil
Fortinet	W32/Agent.F30!tr
AVG	Win32:Papras-AR [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Worm:Win/Bundpil.D#

How to remove MemScan:Worm.Bundpil.B?

MemScan:Worm.Bundpil.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X