Malware

SoftwareBundler:Win32/Prepscram.E malicious file

Malware Removal

The SoftwareBundler:Win32/Prepscram.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What SoftwareBundler:Win32/Prepscram.E virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

trick.matchoatmeal.icu
fuss.wavesfork.online

How to determine SoftwareBundler:Win32/Prepscram.E?


File Info:

crc32: B68C5AFD
md5: 6bb0142b623b320c4582118f73761cfe
name: 6BB0142B623B320C4582118F73761CFE.mlw
sha1: 6b6e89c9515ae89598712094306bd23ec8b2b2dd
sha256: b820596e1de123bfb0a50e60ba5e383fdba1ae4b540bc6ae54aa005a405384b4
sha512: c0d7b8941742c0234e70d6828a38f3b2af65b1323209e9d099a31217c1e655e5166f8ed496207a6fee1a96cae1bdeac11c0597fcbe2f4003e4465e29bafae6fb
ssdeep: 24576:9wN/9KCpDmfP+xc/P3Jurn5IwFlS+cWWx3Pz3kpop2fy+l/:9ipjc/OB18aAC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Enelotoasle paylapel
InternalName: INHYD.EXE
FileVersion: 4.0.1.9
CompanyName: xa9Enelotoasle paylapel
ProductName: INHYD
ProductVersion: 4.0.1.9
OriginalFilename: inhyd.exe
Translation: 0x0409 0x04e4

SoftwareBundler:Win32/Prepscram.E also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053f6df1 )
LionicTrojan.Win32.Zbot.lx9X
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Heur.Mint.Zamg.1
CylanceUnsafe
ZillyaAdware.DownloadHelper.Win32.3086
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaAdWare:Win32/StartSurf.99589ec5
K7GWTrojan ( 0053f6df1 )
Cybereasonmalicious.b623b3
CyrenW32/Kryptik.DID.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HLOA
APEXMalicious
AvastWin32:Adware-gen [Adw]
Kasperskynot-a-virus:UDS:AdWare.Win32.DownloadHelper.gen
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusRiskware.Win32.DownloadHelper.fjqiqr
ViRobotAdware.Downloadhelper.3028992
MicroWorld-eScanGen:Heur.Mint.Zamg.1
TencentWin32.Trojan.Dropper.Wsai
Ad-AwareGen:Heur.Mint.Zamg.1
SophosIStartSurfInstaller (PUA)
ComodoMalware@#m1ydvnktssuo
BitDefenderThetaAI:Packer.66EABF8E20
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PGH21
McAfee-GW-EditionPacked-FKC!6BB0142B623B
FireEyeGeneric.mg.6bb0142b623b320c
EmsisoftGen:Heur.Mint.Zamg.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DownloadHelper.caq
AviraTR/Dropper.Gen2
Antiy-AVLTrojan/Generic.ASMalwS.28C5092
MicrosoftSoftwareBundler:Win32/Prepscram.E
GDataGen:Heur.Mint.Zamg.1
AhnLab-V3Malware/RL.Generic.R242150
Acronissuspicious
McAfeePacked-FKC!6BB0142B623B
MAXmalware (ai score=87)
VBA32BScope.Adware.Prepscram
MalwarebytesAdware.IStartSurf
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PGH21
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexPUA.DownloadHelper!fRIjQKL0rCM
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.12222490.susgen
FortinetW32/Kryptik.FSMR!tr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove SoftwareBundler:Win32/Prepscram.E?

SoftwareBundler:Win32/Prepscram.E removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment