Categories: PUA

What is “PUABundler:Win32/Soft32Downloader”?

The PUABundler:Win32/Soft32Downloader is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUABundler:Win32/Soft32Downloader virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • CAPE detected the embedded pe malware family
  • Attempts to modify proxy settings
  • Touches a file containing cookies, possibly for information gathering
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine PUABundler:Win32/Soft32Downloader?


File Info:

name: 242FBCF99893C7E08276.mlwpath: /opt/CAPEv2/storage/binaries/289fee466521c1f247a19c46680082c39078e0b9de673642a8f81c654bdd7cf5crc32: 2EB62AF6md5: 242fbcf99893c7e082766a9e730103dfsha1: f4348f5ed1651eaba3c7496397a6652d3f9af536sha256: 289fee466521c1f247a19c46680082c39078e0b9de673642a8f81c654bdd7cf5sha512: b70edf4557c299783e3e5f69ddfee8d2ff066b99d570f5a4b20f00d132196706c3089b2237297b70f72c4ecd718d53fc3cebaab046639d22bf9a7937029739fdssdeep: 12288:rwMDD4yOtJVrfyDL3xcqXIHBC3OLQjPHyEOOym:rtgyOjVbyHJXkuOL2SEGmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D2D423881F908873C4E5F8F010BA3415D7BA9EAE239B5D470BB57E664C34723DE151AEsha3_384: 8eb1233b38b5f70e576690f0929ab3e7168e9c4829508e871ef1d6a4588d86adeb3693417632f3f8e820b7e745d54878ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-12-05 22:50:52

Version Info:

0: [No Data]

PUABundler:Win32/Soft32Downloader also known as:

Bkav W32.AIDetectMalware
Lionic Adware.Win32.Generic.mzLM
ClamAV Win.Trojan.Generic-9855872-0
FireEye Generic.mg.242fbcf99893c7e0
CAT-QuickHeal PUA.Wedownload1.Gen
Skyhigh Artemis!PUP
McAfee Artemis!242FBCF99893
Cylance unsafe
Zillya Adware.AgentCRT.Win32.28
Sangfor Suspicious.Win32.Save.ins
K7AntiVirus Unwanted-Program ( 00586e0e1 )
Alibaba AdWare:MSIL/Generic.f2191392
K7GW Unwanted-Program ( 00586e0e1 )
Cybereason malicious.ed1651
VirIT PUP.Win32.WeDownload.A
Symantec SMG.Heur!gen
Elastic malicious (high confidence)
ESET-NOD32 MSIL/Soft32Downloader.C potentially unwanted
Cynet Malicious (score: 100)
Kaspersky not-a-virus:HEUR:AdWare.Win32.Ocna.gen
NANO-Antivirus Trojan.Win32.Soft32Downloader.dwzawx
SUPERAntiSpyware PUP.BundleInstaller/Variant
Avast Win32:Downloader-TOV [PUP]
Emsisoft Application.Downloader (A)
Baidu Win32.Adware.iBryte.a
F-Secure Program.APPL/Soft32Down.diq
DrWeb Adware.Downware.10564
TrendMicro TROJ_GEN.R002C0OLT23
Trapmine malicious.moderate.ml.score
Sophos Generic Reputation PUA (PUA)
Ikarus PUA.MSIL.Soft32downloader
GData Win32.Application.Soft32Downloader.A
Jiangmin AdWare.Ocna.bzp
Google Detected
Avira APPL/Soft32Down.diq
Antiy-AVL Trojan[Downloader]/Win32.Agent.beao
Kingsoft malware.kb.a.955
Xcitium Application.MSIL.Soft32Downloader.C@6m1tz5
ViRobot Adware.Soft32Downloader.607192.ACK
ZoneAlarm not-a-virus:HEUR:AdWare.Win32.Ocna.gen
Microsoft PUABundler:Win32/Soft32Downloader
Varist W32/Soft32Download.F.gen!Eldorado
AhnLab-V3 Win-PUP/Soft32Downloader.X1404
Malwarebytes Generic.Malware.AI.DDS
TrendMicro-HouseCall TROJ_GEN.R002C0OLT23
Tencent Adware.Win32.DL.d
Yandex PUA.Soft32Downloader!LUx+zwfPL5o
SentinelOne Static AI – Suspicious PE
MaxSecure not-a-virus:Downloader.Agent.beao
Fortinet Riskware/Soft32Downloader
AVG Win32:Downloader-TOV [PUP]
DeepInstinct MALICIOUS
CrowdStrike win/grayware_confidence_100% (W)

How to remove PUABundler:Win32/Soft32Downloader?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

1 week ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

1 week ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

1 week ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

1 week ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

1 week ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

1 week ago