Malware

SoftwareBundler:Win32/Dlhelper!pz information

Malware Removal

The SoftwareBundler:Win32/Dlhelper!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What SoftwareBundler:Win32/Dlhelper!pz virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara detections observed in process dumps, payloads or dropped files

How to determine SoftwareBundler:Win32/Dlhelper!pz?



File Info:

name: CE57512446080EC82F8A.mlw
path: /opt/CAPEv2/storage/binaries/340a23e3b1cda6c053078ed9a013c2b18e315b17c3e16f5abcf600d76c31afdc
crc32: 60B9E90D
md5: ce57512446080ec82f8ad580671742dc
sha1: 4c04d42b3b2a12fbda4e7f0d8310a54b6bf922be
sha256: 340a23e3b1cda6c053078ed9a013c2b18e315b17c3e16f5abcf600d76c31afdc
sha512: d69da2a417b6e8c769333cb3df053217a33e63b2de890072cc3bb7f11101e7827497c20e87b3d8f20113e44f263434e0f68da41233f2e9201ad5f6f854f589b3
ssdeep: 24576:DoSUF/QB+9Oczr6vmOsrGE0DWDZAEhdxQa0AdgNg1Wz3+ejPFDu8mAyEq:Mv/ukr6emwAOQqI2S3fP9unAM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C955BCA288C52C09DC64CE39F6557FE3E6060E72392DD73D2D6D730A16BA96ACCC5E04
sha3_384: 1e493da4dbbd0ef9235779af8a9e4d1bbd10a7cf2d66759e053f0b6c300fcbf34862c2ac50a14dc2b471d19c64d1ad88
ep_bytes: 60be00b064008dbe0060dbffc787346c
timestamp: 2015-01-17 11:07:09


Version Info:

FileVersion: 1.9.0.0
ProductVersion: 1.9.0.0
Translation: 0x0409 0x04e4

SoftwareBundler:Win32/Dlhelper!pz also known as:

BkavW32.AIDetectMalware
AVGWin32:OutBrowse-EP [PUP]
DrWebTrojan.DownLoader12.21590
MicroWorld-eScanGen:Variant.Application.Bundler.DlHelper.2
FireEyeGeneric.mg.ce57512446080ec8
SkyhighGenericRXFE-WG!B0A1BCC49A7C
ALYacGen:Variant.Application.Bundler.DlHelper.2
MalwarebytesGeneric.Malware.AI.DDS
ZillyaAdware.DlHelperCRTD.Win32.4759
SangforTrojan.Win32.Save.a
K7AntiVirusUnwanted-Program ( 0040fa1b1 )
K7GWUnwanted-Program ( 0040fa1b1 )
Cybereasonmalicious.446080
BitDefenderThetaGen:NN.ZelphiF.36802.qnLfaSa6eDei
VirITPUP.Win32.KiaForv.A
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Dlhelper.AK potentially unwanted
CynetMalicious (score: 99)
APEXMalicious
ClamAVWin.Trojan.Downloader-66484
Kasperskynot-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
BitDefenderGen:Variant.Application.Bundler.DlHelper.2
NANO-AntivirusTrojan.Win32.Strictor.dnkbno
AvastWin32:OutBrowse-EP [PUP]
TencentMalware.Win32.Gencirc.114df6d3
SophosDLHelper (PUA)
F-SecurePotentialRisk.PUA/Dlhelper.Gen7
VIPREGen:Variant.Application.Bundler.DlHelper.2
Trapminemalicious.high.ml.score
EmsisoftApplication.AdBrowse (A)
SentinelOneStatic AI – Suspicious PE
JiangminPacked.Upantix.ph
AviraPUA/Dlhelper.Gen7
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftSoftwareBundler:Win32/Dlhelper!pz
XcitiumApplication.Win32.Dlhelper.DFC@8n47v5
ArcabitTrojan.Application.Bundler.DlHelper.2
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
GDataWin32.Application.Dlhelper.D
VaristW32/Dlhelper.E.gen!Eldorado
McAfeeGenericRXAA-AA!CE5751244608
MAXmalware (ai score=71)
VBA32BScope.Adware.DownloadHelper
RisingAdware.InstallMonster!1.D4ED (CLASSIC)
YandexTrojan.GenAsa!f84L1spyujo
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Dlhelper
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_100% (D)

How to remove SoftwareBundler:Win32/Dlhelper!pz?

SoftwareBundler:Win32/Dlhelper!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment