Malware

SoftwareBundler.Prepscram.Y7 removal guide

Malware Removal

The SoftwareBundler.Prepscram.Y7 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What SoftwareBundler.Prepscram.Y7 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

up.freeo9.space
set.downor3.space

How to determine SoftwareBundler.Prepscram.Y7?


File Info:

crc32: A35C4DFA
md5: 42f4558a1049261e4709de2b931b801e
name: 42F4558A1049261E4709DE2B931B801E.mlw
sha1: ae1b5706790868bf7643c9770e4c817111c7d2bb
sha256: c046c452f2d17c4cdb596fa5c21c3f55f2db53cabbc6b34ab0c90a4f4cd00e69
sha512: b8820787ac7d1435decda4ab400f8304e6d12027621811252fa8a90ac95a10e3b7e72c08fabe3038460945a5419e0537cc6a8b6ec043575adadd28f3969ceef0
ssdeep: 6144:eEuCWlG97qKRVTc58zDof2y80BlMEOzX:e1Pg20Do+9EOzX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

SoftwareBundler.Prepscram.Y7 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusAdware ( 004f16931 )
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.12243
CAT-QuickHealSoftwareBundler.Prepscram.Y7
MalwarebytesPUP.Optional.IStartSurf
ZillyaTrojan.Yakes.Win32.59005
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/IStartSurf.3bd1d386
K7GWAdware ( 004f16931 )
Cybereasonmalicious.a10492
BaiduWin32.Trojan.Kryptik.awg
CyrenW32/S-17814750!Eldorado
SymantecDownloader
ESET-NOD32a variant of Win32/IStartSurf.AU potentially unwanted
APEXMalicious
AvastWin32:Dropper-gen [Drp]
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Ransom.Petya.Gen.1
NANO-AntivirusTrojan.Win32.Vittalia.edezko
MicroWorld-eScanTrojan.Ransom.Petya.Gen.1
TencentMalware.Win32.Gencirc.10b18c26
Ad-AwareTrojan.Ransom.Petya.Gen.1
SophosGeneric PUA KO (PUA)
ComodoApplication.Win32.IStartSurf.BA@6dd8oi
BitDefenderThetaGen:NN.ZexaF.34142.rCW@a8Qz23ai
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dm
FireEyeGeneric.mg.42f4558a1049261e
EmsisoftTrojan.Ransom.Petya.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1133072
Antiy-AVLTrojan/Generic.ASMalwS.1907420
KingsoftWin32.Troj.Yakes.pt.(kcloud)
MicrosoftSoftwareBundler:Win32/Prepscram
SUPERAntiSpywareRansom.Petya/Variant
GDataTrojan.Ransom.Petya.Gen.1
TACHYONTrojan/W32.Yakes.289792.D
AhnLab-V3Trojan/Win32.Petya.R183092
Acronissuspicious
McAfeeAdware-InstCap
MAXmalware (ai score=89)
VBA32BScope.Trojan.Vittalia
PandaTrj/CI.A
RisingTrojan.Generic@ML.100 (RDMK:QaOZp7L42LRChOSdBaYy/g)
YandexTrojan.Agent!1bdX36oEL0M
IkarusPUA.Downloader
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/IStartSurf.PTYZ!tr
AVGWin32:Dropper-gen [Drp]
Paloaltogeneric.ml

How to remove SoftwareBundler.Prepscram.Y7?

SoftwareBundler.Prepscram.Y7 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment