Malware

Should I remove “SoftwareBundler:Win32/Dlhelper!pz”?

Malware Removal

The SoftwareBundler:Win32/Dlhelper!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What SoftwareBundler:Win32/Dlhelper!pz virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara detections observed in process dumps, payloads or dropped files

How to determine SoftwareBundler:Win32/Dlhelper!pz?



File Info:

name: 3141005B7A1AB4F3C9F9.mlw
path: /opt/CAPEv2/storage/binaries/34d80fa1862e146752869c1821a09b729f67203088d86b5eb8be1c601e506b0e
crc32: 1E69A8FB
md5: 3141005b7a1ab4f3c9f97e2f0293f90a
sha1: 61f5faadb9a5986e22fae7a5a7913bd6b8c482e2
sha256: 34d80fa1862e146752869c1821a09b729f67203088d86b5eb8be1c601e506b0e
sha512: 135b126aac5b10fddb0c2972637422fa2c2f9b0da6a913b6441b777caf8c78e1cfe57a3d92805aa53ec9da8b3ca0acb8ec5e1b34926bb9f125c8e8874a209c18
ssdeep: 24576:5oSUF/QB+9Oczr6vmOsrGE0DWDZAEhdxQa0AdgNg1Wz3K4v3ZI8Sf1NQEf:yv/ukr6emwAOQqI2S3K4vpIvfbr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A155BCA288D12C09DC64CE39F6557FE3E6120E72382DD73D2D6D730A56BA96ACCC5E04
sha3_384: 024867ba33712c8227fe97f45e8c2658063daabb7b2fa9f1fe4e2d77eb2ae51b26fe045a33533fddffc8bd4dd174459b
ep_bytes: 60be00b064008dbe0060dbffc787346c
timestamp: 2015-01-17 11:07:09


Version Info:

FileVersion: 1.9.0.0
ProductVersion: 1.9.0.0
Translation: 0x0409 0x04e4

SoftwareBundler:Win32/Dlhelper!pz also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Application.Bundler.DlHelper.2
FireEyeGeneric.mg.3141005b7a1ab4f3
ALYacGen:Variant.Application.Bundler.DlHelper.2
ZillyaAdware.DlHelperCRTD.Win32.4759
SangforTrojan.Win32.Save.a
K7AntiVirusUnwanted-Program ( 0040fa1b1 )
K7GWUnwanted-Program ( 0040fa1b1 )
Cybereasonmalicious.b7a1ab
VirITPUP.Win32.KiaForv.A
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Dlhelper.AK potentially unwanted
CynetMalicious (score: 99)
APEXMalicious
ClamAVWin.Trojan.Downloader-66484
Kasperskynot-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
BitDefenderGen:Variant.Application.Bundler.DlHelper.2
NANO-AntivirusTrojan.Win32.Strictor.dnkbno
TencentMalware.Win32.Gencirc.114df6d3
SophosDLHelper (PUA)
F-SecurePotentialRisk.PUA/Dlhelper.Gen7
DrWebTrojan.DownLoader12.21590
VIPREGen:Variant.Application.Bundler.DlHelper.2
Trapminemalicious.high.ml.score
EmsisoftApplication.AdBrowse (A)
SentinelOneStatic AI – Suspicious PE
GDataWin32.Application.Dlhelper.D
JiangminPacked.Upantix.ph
VaristW32/Dlhelper.E.gen!Eldorado
AviraPUA/Dlhelper.Gen7
Antiy-AVLTrojan/Win32.TSGeneric
XcitiumApplication.Win32.Dlhelper.DFC@8n47v5
ArcabitTrojan.Application.Bundler.DlHelper.2
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
MicrosoftSoftwareBundler:Win32/Dlhelper!pz
GoogleDetected
BitDefenderThetaGen:NN.ZelphiF.36802.qnLfaOhlQhai
MAXmalware (ai score=77)
DeepInstinctMALICIOUS
VBA32BScope.Adware.DownloadHelper
MalwarebytesGeneric.Malware.AI.DDS
RisingAdware.InstallMonster!1.D4ED (CLASSIC)
YandexTrojan.GenAsa!f84L1spyujo
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Dlhelper
PandaTrj/Genetic.gen
CrowdStrikewin/grayware_confidence_100% (D)

How to remove SoftwareBundler:Win32/Dlhelper!pz?

SoftwareBundler:Win32/Dlhelper!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment