Categories: PUA

PUP.Optional.BundleInstaller.RU removal guide

The PUP.Optional.BundleInstaller.RU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.BundleInstaller.RU virus can do?

Presents an Authenticode digital signature
At least one IP Address, Domain, or File Name was found in a crypto call
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Attempts to create or modify system certificates

Related domains:

crt.usertrust.com

How to determine PUP.Optional.BundleInstaller.RU?


File Info:
crc32: 7A64A1F8md5: d7d10c723ae2c4bba51defa62bbcb0f7name: msetup_27305565.exesha1: a2e1223f0d6a3d4e6c7df5fe0236f1cc02fe9e8dsha256: c2cad0cffc948dfc127115518a477316a5d47068c293119e60a93ba413cd8fbcsha512: 6db0567bdfc0ab9c508db28a0641dd748d2cedcf53c39ba069bea935cf4739f5b79a356d3fafddddd5162c2186db641a670b9c4e940bb33a9d39a8ed1f0393c8ssdeep: 6144:beDMt8tYqA+L1d1VcCcBHwlPWgBQpRxiGnzniJKARf/5cb:be0+L1d1WCawlPWgBQp3fjiJK4f/5Utype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2020 NBZ LTD.InternalName: multi_setup.exeFileVersion: 1.4.3.0CompanyName: NBZ LTD.ProductName: MultiSetupProductVersion: 1.4.3.0FileDescription: MultiSetupOriginalFilename: multi_setup.exeTranslation: 0x0419 0x04b0

PUP.Optional.BundleInstaller.RU also known as:

DrWeb	Adware.Elemental.17
McAfee	GenericRXAA-AA!D7D10C723AE2
Malwarebytes	PUP.Optional.BundleInstaller.RU
Sangfor	Malware
K7AntiVirus	Adware ( 0055d3751 )
K7GW	Adware ( 0055d3751 )
Cyren	W32/Trojan.DXEE-4962
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/MSetupDownloader.A potentially unwanted
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:Downloader.Win32.MulSetup.gen
Emsisoft	Application.Downloader (A)
Comodo	ApplicUnwnt@#387ev39opf0dl
Invincea	heuristic
McAfee-GW-Edition	Artemis!PUP
Fortinet	Riskware/MulSetup
Sophos	Generic PUA KC (PUA)
Jiangmin	Downloader.MulSetup.p
Endgame	malicious (high confidence)
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.MulSetup.gen
Microsoft	PUA:Win32/Presenoker
VBA32	Downloader.MulSetup
Cylance	Unsafe
Rising	PUF.MSetupDownloader!8.1152F (CLOUD)
Webroot	W32.Adware.Gen