Malware

Should I remove “SoftwareBundler:Win32/Dlhelper!pz”?

Malware Removal

The SoftwareBundler:Win32/Dlhelper!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What SoftwareBundler:Win32/Dlhelper!pz virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Yara detections observed in process dumps, payloads or dropped files

How to determine SoftwareBundler:Win32/Dlhelper!pz?



File Info:

name: 13FB59CAFBB69B737FCC.mlw
path: /opt/CAPEv2/storage/binaries/ad7d4d55a80d24abd2f7e734eaf2f6842da9d7e320673f1a8f9a4c790a5c9277
crc32: D765C241
md5: 13fb59cafbb69b737fccd058d826738e
sha1: 3a89531afdd4af3579b8a5507b725eff069b8f4a
sha256: ad7d4d55a80d24abd2f7e734eaf2f6842da9d7e320673f1a8f9a4c790a5c9277
sha512: c7e71e24a522fe6ae84dc503e5b764e4d13d10d82c60f5066ff88a76b677570eb82e7cf8d067a99b21f85b2198ecabe5e93cf3ced5876247d548decb67eceef8
ssdeep: 24576:1oSUF/QB+9Oczr6vmOsrGE0DWDZAEhdxQa0AdgNg1Wq3QeAPCPEh:2v/ukr6emwAOQqI2b3Aqs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ED55BCA188C56C09DC64CE39F6957FE3E6020E72382DD73D2D6D730A16BA96ACCC5E05
sha3_384: d5cc996351b99d318dd3c4bc2e6e8ee09dbe4839b034eb3c4fc346cd2fff437f68416a7e6bbeffe3584596ac98be071b
ep_bytes: 60be00b064008dbe0060dbffc787346c
timestamp: 2015-01-17 11:07:09


Version Info:

FileVersion: 1.9.0.0
ProductVersion: 1.9.0.0
Translation: 0x0409 0x04e4

SoftwareBundler:Win32/Dlhelper!pz also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Application.Bundler.DlHelper.2
FireEyeGeneric.mg.13fb59cafbb69b73
SkyhighGenericRXFE-WG!F8EA5CA76AE2
McAfeeGenericRXAA-AA!13FB59CAFBB6
ZillyaAdware.DlHelperCRTD.Win32.4759
SangforTrojan.Win32.Save.a
K7AntiVirusUnwanted-Program ( 0040fa1b1 )
K7GWUnwanted-Program ( 0040fa1b1 )
Cybereasonmalicious.afbb69
VirITPUP.Win32.KiaForv.A
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Dlhelper.AK potentially unwanted
APEXMalicious
ClamAVWin.Trojan.Downloader-66484
Kasperskynot-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
BitDefenderGen:Variant.Application.Bundler.DlHelper.2
NANO-AntivirusTrojan.Win32.Strictor.dnkbno
AvastWin32:OutBrowse-EP [PUP]
RisingAdware.InstallMonster!1.D4ED (CLASSIC)
EmsisoftApplication.AdBrowse (A)
GoogleDetected
F-SecurePotentialRisk.PUA/Dlhelper.Gen7
DrWebTrojan.DownLoader12.21590
VIPREGen:Variant.Application.Bundler.DlHelper.2
Trapminemalicious.high.ml.score
SophosDLHelper (PUA)
SentinelOneStatic AI – Suspicious PE
JiangminPacked.Upantix.ph
VaristW32/Dlhelper.E.gen!Eldorado
AviraPUA/Dlhelper.Gen7
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftSoftwareBundler:Win32/Dlhelper!pz
XcitiumApplication.Win32.Dlhelper.DFC@8n47v5
ArcabitTrojan.Application.Bundler.DlHelper.2
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.DownloadHelper.gen
GDataWin32.Application.Dlhelper.D
CynetMalicious (score: 99)
AhnLab-V3PUP/Win.Bundler.R640934
BitDefenderThetaGen:NN.ZelphiF.36802.qnLfaugrFlci
ALYacGen:Variant.Application.Bundler.DlHelper.2
MAXmalware (ai score=99)
VBA32BScope.Adware.DownloadHelper
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TencentMalware.Win32.Gencirc.114df6d3
YandexTrojan.GenAsa!f84L1spyujo
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Dlhelper
AVGWin32:OutBrowse-EP [PUP]
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_100% (D)

How to remove SoftwareBundler:Win32/Dlhelper!pz?

SoftwareBundler:Win32/Dlhelper!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment