What is “PUABundler:Win32/MSetup”?

The PUABundler:Win32/MSetup is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUABundler:Win32/MSetup virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUABundler:Win32/MSetup?


File Info:
name: 601387E1BA00E4FACB63.mlw
path: /opt/CAPEv2/storage/binaries/e2add35662f9f154260b557a4a87d54d14b045cd6d2f4db15433834f37830103
crc32: B5D12631
md5: 601387e1ba00e4facb63e4957759724d
sha1: d120f8d63005f3881645911bb60ea3e0af1bc443
sha256: e2add35662f9f154260b557a4a87d54d14b045cd6d2f4db15433834f37830103
sha512: 2e0ee43be6b5d89abc0d2150b934b6b629aa22945e1ea968393e3bcefa4d7d169cd0d1de408c7c59d70465eeae4eea86ca249761b2e15eb7620818cba3405e69
ssdeep: 6144:o2HRFGHrrhIEOAiO4PQ6hnJHLjDTOo1hsHTS5BtO8jdsPRwAoRDfJf:jFGirO96l5p1hgTOPrGYDfJf
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FCA49D12A8A085F3D38201B4DEFD6F379ABD8A64533079C367D41D706971AE3A23663D
sha3_384: ed44a22f9ddbb8ed43662bdcf700d2a04d389390229f1c530b262c387996311c449b94d4c443c6894714e9cfbbc5196c
ep_bytes: 
timestamp: 2023-09-21 06:05:51

Version Info:
0: [No Data]

PUABundler:Win32/MSetup also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKDZ.103080
FireEye	Trojan.GenericKDZ.103080
Skyhigh	Artemis!Trojan
Sangfor	Trojan.Win32.Agent.V341
Arcabit	Trojan.Generic.D192A8
BitDefender	Trojan.GenericKDZ.103080
Sophos	Mal/Generic-S
VIPRE	Trojan.GenericKDZ.103080
Emsisoft	Trojan.GenericKDZ.103080 (B)
Xcitium	Heur.Corrupt.PE@1z141z3
Microsoft	PUABundler:Win32/MSetup
GData	Trojan.GenericKDZ.103080
ALYac	Trojan.GenericKDZ.103080
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.2358536109
TrendMicro-HouseCall	TROJ_GEN.R049H09KT23
Rising	Trojan.Generic@AI.100 (RDML:JqNT7u4L0Gud8GJCNDAlWQ)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenericKDZ.103080!dam
DeepInstinct	MALICIOUS

How to remove PUABundler:Win32/MSetup?

PUABundler:Win32/MSetup removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X