PUABundler:Win32/MSetup removal tips

The PUABundler:Win32/MSetup is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUABundler:Win32/MSetup virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUABundler:Win32/MSetup?


File Info:
name: DEC00BCFACF8028AD652.mlw
path: /opt/CAPEv2/storage/binaries/9b716a33d794480e71fa568d9ece13698921b8d98b880892aa76b2254fc63311
crc32: 36AE9A83
md5: dec00bcfacf8028ad652e7261d972722
sha1: 710b71094845bad05dc3028c38155f95bd96c9d3
sha256: 9b716a33d794480e71fa568d9ece13698921b8d98b880892aa76b2254fc63311
sha512: 42e26a254664d029e77a7d2e9293b9b3cff8ba99c152f6b0ed0e069427804658dc4f20a32696571d4ae9d08ea2613f21f45cfb6b60bc2fb62aaa168d67c2f5b6
ssdeep: 12288:AFGivO96l5p1hgTOPrGYDfJtW7C8z2eYFKY4:AFROY5p1+ydfGC4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T193B4AE12BC9085B3D34211B0DABD6F379ABD8A7453307AC353D41D706A71AE3A23667E
sha3_384: 2b2f13c525870683a692e60100e66240fcb9356ef0aaae4eb52d4e56be12537adb2caef34d0e4692918e25edb32ba814
ep_bytes: e87f0b0000e97afeffff3b0d44804c00
timestamp: 2023-09-21 07:58:15

Version Info:
0: [No Data]

PUABundler:Win32/MSetup also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Trojan.GenericKDZ.103080
McAfee	GenericRXAA-FA!DEC00BCFACF8
Malwarebytes	Generic.Malware.AI.DDS
Cybereason	malicious.94845b
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKDZ.103080
Emsisoft	Trojan.GenericKDZ.103080 (B)
VIPRE	Trojan.GenericKDZ.103080
GData	Trojan.GenericKDZ.103080
Jiangmin	Downloader.MPCrow.k
Varist	W32/Kryptik.LJF.gen!Eldorado
Arcabit	Trojan.Generic.D192A8
Microsoft	PUABundler:Win32/MSetup
Google	Detected
ALYac	Trojan.GenericKDZ.103080
Rising	Trojan.Generic@AI.100 (RDML:eZtqy6JkazOpPuYAa0+iGg)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenericKDZ.103080!dam
CrowdStrike	win/grayware_confidence_60% (D)

How to remove PUABundler:Win32/MSetup?

PUABundler:Win32/MSetup removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X