How to remove “PUABundler:Win32/MSetup”?

The PUABundler:Win32/MSetup is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUABundler:Win32/MSetup virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUABundler:Win32/MSetup?


File Info:
name: 8E4B5B3AB33606CE6127.mlw
path: /opt/CAPEv2/storage/binaries/3ce8fe6a08689c3c6af69b94006f334ba4ef19ea6f79eb0436d79e9ab6566615
crc32: D4B44CA8
md5: 8e4b5b3ab33606ce6127a3f0c66cd2db
sha1: e678a62bd2d367d703b2252dbc28e1b3fcd5c8af
sha256: 3ce8fe6a08689c3c6af69b94006f334ba4ef19ea6f79eb0436d79e9ab6566615
sha512: d554882ddbdabfdb769fcb6429e357362392c82a9b999ec1f51a8b4859b1480f0a088a3b9e07251f7f277d5da2f882c77e586887482ec67c3559373e8e49d006
ssdeep: 3072:783/BziLFFRRPGi/QEuEuxQh/h0dIIJTOhAvKSckiZI4PQ6KiEyDbJ162NFswK:E2HRFGHrrhIEOciO4PQ6hnJHLK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BF447B32587089B6D35622B0DE7D2F72E1BCDAA453703AC323D81E745272DDB9172A1A
sha3_384: 2f210f305ba8464a3f39e28ca087b47772906fff2453d99155d715a706339faaa479b83280795cbcbd1b71cc8d4c7c11
ep_bytes: 
timestamp: 2023-09-21 08:28:17

Version Info:
0: [No Data]

PUABundler:Win32/MSetup also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
FireEye	Trojan.GenericKDZ.103080
Skyhigh	BehavesLike.Win32.Generic.dh
ALYac	Trojan.GenericKDZ.103080
Sangfor	Trojan.Win32.Agent.Vsyp
Arcabit	Trojan.Generic.D192A8
BitDefender	Trojan.GenericKDZ.103080
MicroWorld-eScan	Trojan.GenericKDZ.103080
Emsisoft	Trojan.GenericKDZ.103080 (B)
VIPRE	Trojan.GenericKDZ.103080
Sophos	Mal/Generic-S
Google	Detected
Microsoft	PUABundler:Win32/MSetup
GData	Trojan.GenericKDZ.103080
Varist	W32/Kryptik.LJF.gen!Eldorado
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R002H09BA24
Rising	Trojan.Generic@AI.100 (RDML:E3TycNLc3s8/x+FUFABZJg)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenericKDZ.103080!dam
Cybereason	malicious.ab3360
DeepInstinct	MALICIOUS
alibabacloud	Suspicious

How to remove PUABundler:Win32/MSetup?

PUABundler:Win32/MSetup removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X