Malware

How to remove “SoftwareBundler:Win32/Stallmonitz”?

Malware Removal

The SoftwareBundler:Win32/Stallmonitz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What SoftwareBundler:Win32/Stallmonitz virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.ntdlzone.com

How to determine SoftwareBundler:Win32/Stallmonitz?


File Info:

crc32: 44D878DD
md5: 2920cd7c9711c47c787802fa6d021310
name: calculadora.free.exe
sha1: 6d3d7882d024f08656e8fb89b363cb23f572f14b
sha256: ee864d359ad3bb54cedca94e35110e885a32bb3e5ff6c7c823431196ccab63e4
sha512: b7570cd811c5123792bfa44421366a6a6ac6d67251e4f29288fae3d5fc41f0e4024e6f696b7039e4b714f71e3cda14c32f3d60185870a21989485dae4daef758
ssdeep: 24576:YB2UHSsYXYwZkSvhFtJRonjzNtCR5mGx/T2L:yH9nWhFCjCR4g/T2L
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

SoftwareBundler:Win32/Stallmonitz also known as:

GDataWin32.Application.Agent.DNMS9F
F-SecurePotentialRisk.PUA/InstallMonetizer.5433
AviraPUA/InstallMonetizer.5433
MAXmalware (ai score=94)
Antiy-AVLGrayWare[Downloader]/Win32.Adload.gen
MicrosoftSoftwareBundler:Win32/Stallmonitz
CylanceUnsafe
ESET-NOD32Win32/InstallMonetizer.AN potentially unwanted
AVGNSIS:InstMonetizer-CA [PUP]
AvastNSIS:InstMonetizer-CA [PUP]

How to remove SoftwareBundler:Win32/Stallmonitz?

SoftwareBundler:Win32/Stallmonitz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment