Malware

SoftwareBundler:Win32/Lolliport removal tips

Malware Removal

The SoftwareBundler:Win32/Lolliport is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What SoftwareBundler:Win32/Lolliport virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • A process attempted to delay the analysis task by a long amount of time.
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

www.fcvenkaeast.us

How to determine SoftwareBundler:Win32/Lolliport?


File Info:

crc32: DC5B8757
md5: 06ed78d1be47d08f997d77f3665a519f
name: 06ED78D1BE47D08F997D77F3665A519F.mlw
sha1: a2ca69475fdd4f8f057f67faa6d9c5e085d9edb2
sha256: 5fe3ff7a5dc55e018d8ca4883ba6f487451da400cd76cb6b9de2dd644e6d612e
sha512: 5543e886ea35d10a34085911c635f55aaf6d1a71432d03ee81736be791d06c8741c9e9233ee401b1f6a213261c1159bae834441b1294d17f792d9513bff84f92
ssdeep: 24576:FWMesKXPC9vKiWmbCv1DOLyhMsLcLcNl7J8gM1aluXSR95u:F7esyPCImIMLOcLcNl7JHPZ95u
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

SoftwareBundler:Win32/Lolliport also known as:

BkavW32.AIDetect.malware1
DrWebTrojan.MulDrop4.22250
CAT-QuickHealPUA.NSIS.InstallMonetizer.A
McAfeeArtemis!06ED78D1BE47
CylanceUnsafe
VIPREInstallMonetizer (fs)
AegisLabTrojan.Win32.Generic.4!c
SangforTrojan.Win32.AGEN.1016503
Cybereasonmalicious.75fdd4
SymantecPUA.SearchProtect
APEXMalicious
AvastNSIS:Adware-IA [PUP]
AlibabaAdWare:Win32/InstallMonetizer.79b12470
NANO-AntivirusTrojan.Win32.Drop.cspele
ViRobotAdware.Muldrop4.1275613
SophosGeneric PUA KC (PUA)
F-SecureHeuristic.HEUR/AGEN.1124362
McAfee-GW-EditionBehavesLike.Win32.Ransom.tc
AviraHEUR/AGEN.1124362
Antiy-AVLTrojan/Win32.SGenericS:B
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftSoftwareBundler:Win32/Lolliport
GDataNSIS.Adware.SysTweak.N (3x)
CynetMalicious (score: 90)
VBA32Trojan.MulDrop
MalwarebytesMalware.AI.4259704343
ESET-NOD32multiple detections
AVGNSIS:Adware-IA [PUP]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_70% (D)

How to remove SoftwareBundler:Win32/Lolliport?

SoftwareBundler:Win32/Lolliport removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment