Categories: Malware

SoftwareBundler:Win32/Ogimant removal

The SoftwareBundler:Win32/Ogimant is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What SoftwareBundler:Win32/Ogimant virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process attempted to delay the analysis task.
Unconventionial language used in binary resources: Russian
Attempts to remove evidence of file being downloaded from the Internet
Anomalous binary characteristics

Related domains:

forces.halftrade.ru

How to determine SoftwareBundler:Win32/Ogimant?


File Info:
crc32: F2608C52md5: c1daa6376c2c9b440c7bd8246469066bname: 1418481443_assassinscreed4blackflagv106plus20trainer.exesha1: 399a8fb1654bdd6b57b64876a42cf55eb112a72dsha256: 9dc13f03997dd2338a800350f01ab4464955717d5c9d1bc8eb2e76799eeeb8c5sha512: 5810c48ad21dce300f87eee4c12b96352711b274fee77fe99f7eb180042187b872c9a2d540a046c0320c0f228869b33056b451b257a4bf073982e322e087a06fssdeep: 6144:TolI/yEeA6sA6Lg+gLLPZj81S+LiHtfYqsKmUgmR6v+nrdvzYv5pd7vqyvDoFIm:TomrhgpA/CArF+nB8bd7vqKoFtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: 998 Ma8-20no0rk RuichssivInternalName: rnaStels Deut Viebug sinOuertpwFileVersion: 4.76CompanyName: SlsysernaintProductName: ternals Desin wbugvieSyProductVersion: 4.76FileDescription: AllowMultipleInstancesOriginalFilename: fdjuu5we.exeTranslation: 0x0409 0x04b0

SoftwareBundler:Win32/Ogimant also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Gen:Variant.Adware.Kazy.432610
CMC	Trojan.Win32.CodecPack.1!O
CAT-QuickHeal	Softwarebundler.Ogimant
ALYac	Gen:Variant.Adware.Kazy.432610
Malwarebytes	Adware.LoadMoney
VIPRE	Trojan.Win32.Generic.pak!cobra
BitDefender	Gen:Variant.Adware.Kazy.432610
K7GW	Trojan ( 7000000f1 )
K7AntiVirus	Trojan ( 7000000f1 )
Invincea	heuristic
Baidu	Win32.Adware.Kryptik.c
NANO-Antivirus	Trojan.Win32.Plocust.dmnfms
Cyren	W32/LoadMoney.AJ.gen!Eldorado
Symantec	SMG.Heur!gen
TrendMicro-HouseCall	TROJ_GEN.R004C0OG118
Paloalto	generic.ml
ClamAV	Win.Adware.LoadMoney-3644756-1
GData	Gen:Variant.Adware.Kazy.432610
Kaspersky	not-a-virus:Downloader.Win32.Plocust.rjta
ViRobot	Adware.Loadmoney.487424.ER
Rising	Trojan.Kryptik!8.8 (TFE:1:DQwrKhn9TrV)
Ad-Aware	Gen:Variant.Adware.Kazy.432610
Sophos	Troj/LdMon-J
DrWeb	Trojan.LoadMoney.336
Zillya	Downloader.Plocust.Win32.261380
TrendMicro	TROJ_GEN.R004C0OG118
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gh
Emsisoft	Gen:Variant.Adware.Kazy.432610 (B)
SentinelOne	static engine – malicious
F-Prot	W32/LoadMoney.AJ.gen!Eldorado
Jiangmin	Adware.Adware.mov
Webroot	W32.Adware.Gen
Avira	PUA/LoadMoney.Gen7
Antiy-AVL	RiskWare[Downloader]/Win32.Plocust.rjta
Endgame	malicious (high confidence)
Arcabit	Trojan.Adware.Kazy.D699E2
SUPERAntiSpyware	PUP.LoadMoney/Variant
ZoneAlarm	not-a-virus:Downloader.Win32.Plocust.rjta
Microsoft	SoftwareBundler:Win32/Ogimant
AhnLab-V3	PUP/Win32.LoadMoney.R128327
McAfee	Packed-CQ
VBA32	Malware-Cryptor.Limpopo
Cylance	Unsafe
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/Adware.LoadMoney.AEA
Tencent	Win32.Adware.Planeta.Auto
Yandex	PUA.Downloader!
MAX	malware (ai score=100)
Fortinet	W32/Kryptik.CTUA!tr
AVG	Win32:LoadMoney-APN [Adw]
Cybereason	malicious.76c2c9
Avast	Win32:LoadMoney-APN [Adw]
CrowdStrike	malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM20.1.3B5C.Malware.Gen