PUA

Should I remove “PUP.Optional.ICLoader”?

Malware Removal

The PUP.Optional.ICLoader is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What PUP.Optional.ICLoader virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization
  • Detects the presence of Wine emulator via registry key
  • Anomalous binary characteristics

How to determine PUP.Optional.ICLoader?



File Info:

crc32: CA8D5362
md5: bfbdcc4882d9d444fdfdee43a20ab60c
name: BFBDCC4882D9D444FDFDEE43A20AB60C.mlw
sha1: 94241d97d37d1b4c43ddd2363cacd37ad82cfc92
sha256: 1e0c86693586d9d360a09e54eebdbc1abc89c61563bca84f26c20895a10793f7
sha512: cffd191ecd5dd0d8b04e159c1a0fd45171974e2d8f684ccbbfdf0e4de735b2607255141d6e0a0154cea341c7090b272acdfd309b0cd64f0b3c4784fd0a3ea42c
ssdeep: 24576:j4YZNYGm7X3Y7MGbYCFq0AFajg4eDjGVkw7ZUxZGoEmzogo/pRX4y:j42YGQ41VTdg4eDjukw7ZUxZGoEdb
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright (c) 1983,2001 Borland Software Corporation
InternalName: DCC32
FileVersion: 7.0.4.453
Copyright: Copyright (c) 1983,2001 Borland Software Corporation
CompanyName: Borland Software Corporation
ProductName: Borland Delphi/C++Builder (Enterprise Edition)
ProductVersion: 7.0.4.453
FileDescription: Delphi Pascal Compiler
Translation: 0x0409 0x04e4

PUP.Optional.ICLoader also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00538b811 )
Elasticmalicious (high confidence)
DrWebTrojan.InstallCube.3673
MicroWorld-eScanApplication.Bundler.ICLoader.4.Gen
CAT-QuickHealPUA.IcloaderRI.S19006307
ALYacApplication.Bundler.ICLoader.4.Gen
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirTool:Win32/CeeInject.6917a237
K7GWTrojan ( 00538b811 )
Cybereasonmalicious.882d9d
CyrenW32/Trojan.BXC.gen!Eldorado
SymantecPUA.ICLoader
ESET-NOD32a variant of Win32/Kryptik.GJDT
APEXMalicious
AvastWin32:ICLoader-X [Adw]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderApplication.Bundler.ICLoader.4.Gen
NANO-AntivirusTrojan.Win32.Ekstak.ffqxrm
TencentTrojan.Win32.Kryptik.gjiy
Ad-AwareApplication.Bundler.ICLoader.4.Gen
ComodoApplication.Win32.ICLoader.GHH@7rkufo
BitDefenderThetaGen:NN.ZexaF.34266.3r0@aS35YJfi
VIPRETrojan.Win32.Generic!BT
TrendMicroPUA.Win32.ICLoader.SMA
McAfee-GW-EditionBehavesLike.Win32.Generic.th
FireEyeGeneric.mg.bfbdcc4882d9d444
EmsisoftApplication.Bundler.ICLoader.4.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Ekstak.ndg
AviraPUA/ICLoader.Gen7
Antiy-AVLTrojan/Generic.ASBOL.C4FA
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftVirTool:Win32/CeeInject.AJX!bit
SUPERAntiSpywarePUP.InstallCore/Variant
GDataWin32.Application.ICLoader.F
AhnLab-V3PUP/Win32.Agent.R232392
Acronissuspicious
McAfeePacked-FJO!BFBDCC4882D9
MAXmalware (ai score=100)
VBA32Trojan.Fuerboos
MalwarebytesPUP.Optional.ICLoader
PandaTrj/Genetic.gen
TrendMicro-HouseCallPUA.Win32.ICLoader.SMA
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
YandexTrojan.GenAsa!OZVPnw8G0Zw
IkarusTrojan.Win32.Crypt
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:ICLoader-X [Adw]
Paloaltogeneric.ml

How to remove PUP.Optional.ICLoader?

PUP.Optional.ICLoader removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment