What is “PUABundler:Win32/Soft32Downloader”?

The PUABundler:Win32/Soft32Downloader is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUABundler:Win32/Soft32Downloader virus can do?

• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• CAPE detected the embedded pe malware family
• Attempts to modify proxy settings
• Touches a file containing cookies, possibly for information gathering
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine PUABundler:Win32/Soft32Downloader?

File Info:
name: 242FBCF99893C7E08276.mlw
path: /opt/CAPEv2/storage/binaries/289fee466521c1f247a19c46680082c39078e0b9de673642a8f81c654bdd7cf5
crc32: 2EB62AF6
md5: 242fbcf99893c7e082766a9e730103df
sha1: f4348f5ed1651eaba3c7496397a6652d3f9af536
sha256: 289fee466521c1f247a19c46680082c39078e0b9de673642a8f81c654bdd7cf5
sha512: b70edf4557c299783e3e5f69ddfee8d2ff066b99d570f5a4b20f00d132196706c3089b2237297b70f72c4ecd718d53fc3cebaab046639d22bf9a7937029739fd
ssdeep: 12288:rwMDD4yOtJVrfyDL3xcqXIHBC3OLQjPHyEOOym:rtgyOjVbyHJXkuOL2SEGm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D2D423881F908873C4E5F8F010BA3415D7BA9EAE239B5D470BB57E664C34723DE151AE
sha3_384: 8eb1233b38b5f70e576690f0929ab3e7168e9c4829508e871ef1d6a4588d86adeb3693417632f3f8e820b7e745d54878
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
0: [No Data]

PUABundler:Win32/Soft32Downloader also known as:

How to remove PUABundler:Win32/Soft32Downloader?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.