Categories: Trojan

TrojanDropper:Win32/Bunitu.G removal

The TrojanDropper:Win32/Bunitu.G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Bunitu.G virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Attempts to identify installed AV products by registry key

How to determine TrojanDropper:Win32/Bunitu.G?


File Info:
crc32: A64A1233md5: b51e78c07df8268b530a011970ad3fbfname: B51E78C07DF8268B530A011970AD3FBF.mlwsha1: c78ca7c6fe83666fceed413cb6d44e268cd1214bsha256: f1b48329993c6332a6e7326f809573e055d1d021cb976a09ebff2e2984566f51sha512: 88877cec3c64414065247d556edc6d68dfd05e644cc517f6600a45ed1dd5bfd9bbe8f4897d4c56c003381916b4cb175114ec790171dcf683153945c14e671683ssdeep: 3072:Zg/kZb22ioTzCd3Nx+kNAaVH0FxRE4l5TuwWt+Ht+i:NbQoTzChNZAa2JxWQtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2008-2010 ashampoo Technology GmbH Co. KGInternalName: Cancel Autoplay 2FileVersion: 2.0.0.0CompanyName: AshampooLegalTrademarks1: (cel Autoplay 2: 0x06x01ProductVersion.0: DcelAutoplay2.exe: Dx12x01ProductNameFileDescription: Cancel Autoplay 2galTrademarks2: Px14x01OriginalFilenameTranslation: 0x0409 0x04b0

TrojanDropper:Win32/Bunitu.G also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.b51e78c07df8268b
CAT-QuickHeal	Ransom.Cerber.A4
McAfee	Ransomware-GCQ!B51E78C07DF8
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005224381 )
BitDefender	Trojan.Ransom.Cerber.1
K7GW	Trojan ( 005224381 )
Cybereason	malicious.07df82
BitDefenderTheta	Gen:NN.ZexaF.34590.sq1@a4CRcbki
Cyren	W32/S-dc72fe42!Eldorado
Symantec	Packed.Generic.459
ESET-NOD32	a variant of Win32/Kryptik.FJFI
Baidu	Win32.Trojan.Kryptik.bfj
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Menti.gen
NANO-Antivirus	Trojan.Win32.Menti.evjuwy
MicroWorld-eScan	Trojan.Ransom.Cerber.1
Rising	Ransom.Cerber!8.3058 (C64:YzY0Oocfm/sVctdO)
Ad-Aware	Trojan.Ransom.Cerber.1
Emsisoft	Trojan.Ransom.Cerber.1 (B)
Comodo	MalCrypt.Indus!@1qrzi1
F-Secure	Heuristic.HEUR/AGEN.1121405
TrendMicro	Ransom_HPCERBER.SM60
McAfee-GW-Edition	Ransomware-GCQ!B51E78C07DF8
Sophos	ML/PE-A + Mal/Cerber-B
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1121405
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Menti
Microsoft	TrojanDropper:Win32/Bunitu.G
Arcabit	Trojan.Ransom.Cerber.1
SUPERAntiSpyware	Ransom.Mobef/Variant
AhnLab-V3	Win-Trojan/Lukitus2.Exp
ZoneAlarm	Trojan.Win32.Menti.gen
GData	Trojan.Ransom.Cerber.1
Acronis	suspicious
VBA32	Trojan.Menti
ALYac	Trojan.Ransom.Cerber.1
Malwarebytes	Malware.AI.1875727330
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_HPCERBER.SM60
Tencent	Win32.Trojan.Generic.Pcsk
Yandex	Trojan.GenAsa!kc2WaeHXWLA
Ikarus	Trojan.Crypt
Fortinet	W32/Kryptik.HGZD!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/TrojanDownloader.Menti.HxQBuTsA