PUA

PUABundler:Win32/MSetup removal tips

Malware Removal

The PUABundler:Win32/MSetup is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUABundler:Win32/MSetup virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine PUABundler:Win32/MSetup?


File Info:

name: EFEF9953D371685CA75F.mlw
path: /opt/CAPEv2/storage/binaries/d79b01659377ff9c90445972c6843901d8a8318ef1c100073bcd971eeb55f16c
crc32: E29E2B20
md5: efef9953d371685ca75fc7efe34bf771
sha1: 60e101511befae425bd13d83992a2648a520572e
sha256: d79b01659377ff9c90445972c6843901d8a8318ef1c100073bcd971eeb55f16c
sha512: 96ae6b5ae07c617d88668dacdb94958b6b4c9eed393da69ed0d4825b367149afb736cbe8ef1069007f7370e57d6c4a1254cb4fc27b6115c64428346f1cd5ea85
ssdeep: 6144:02HRFGHrrhIEOsiO4PQ6hnJHLjDTOo1hsHTS5BtO8jdsPRwAL:nFGivO96l5p1hgTOPrGL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T192949D12A8A085F3D38211B4DEFD6F37D6BC8B64533069C363D41D745671AE3A236A2E
sha3_384: de6ca7885bde16f995f992db034fbd2f560b050f4e9853f7153737c31b6635c9274ea13f63622ccb1c8cbd6422774dce
ep_bytes:
timestamp: 2023-09-21 05:10:55

Version Info:

0: [No Data]

PUABundler:Win32/MSetup also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKDZ.103080
FireEyeTrojan.GenericKDZ.103080
SkyhighArtemis!Trojan
SangforTrojan.Win32.Agent.Vo0i
ArcabitTrojan.Generic.D192A8
BitDefenderTrojan.GenericKDZ.103080
RisingTrojan.Generic@AI.100 (RDML:g+A4n9r/CMTUga2TSMOZ/A)
EmsisoftTrojan.GenericKDZ.103080 (B)
VIPRETrojan.GenericKDZ.103080
SophosMal/Generic-S
GoogleDetected
XcitiumHeur.Corrupt.PE@1z141z3
MicrosoftPUABundler:Win32/MSetup
GDataTrojan.GenericKDZ.103080
VaristW32/ABAdware.VYSL-1860
ALYacTrojan.GenericKDZ.103080
MAXmalware (ai score=81)
MalwarebytesMalware.AI.2358536109
TrendMicro-HouseCallTROJ_GEN.R002H09L123
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/GenericKDZ.103080!dam
DeepInstinctMALICIOUS

How to remove PUABundler:Win32/MSetup?

PUABundler:Win32/MSetup removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment