Should I remove “UDS:Downloader.Win32.InstallMeta.b”?

The UDS:Downloader.Win32.InstallMeta.b is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Downloader.Win32.InstallMeta.b virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the embedded pe malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine UDS:Downloader.Win32.InstallMeta.b?

File Info:
name: 5171E335463D8DC7BFC4.mlw
path: /opt/CAPEv2/storage/binaries/19084aac0a9878e8ce4920be757fdcc31bc275465b5e94e0e5500e0dd8f36237
crc32: DAE9FB9A
md5: 5171e335463d8dc7bfc4f7ba976083c0
sha1: 0b0a6c69561d58c01e71d47c09872e5d1c543494
sha256: 19084aac0a9878e8ce4920be757fdcc31bc275465b5e94e0e5500e0dd8f36237
sha512: 1e749ca087019bc9449667333264330152b9d24c445e8d701d3dc8a22508a7d1ad1bc178954c788c2f9a27afc48dc5f68d5d50a1b7f017b2362951a2c70d904c
ssdeep: 24576:uAEjq54xxpHoTKjfLJYr3ZtZmvIwA3K5spmMTivSvYa55CPYuh94U+LVKrE8LX:zEjqG1CKjfLJGxB65QzT5g48wuhH+L0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CA953302F7D4D81CC9A08C721255F1A6CA157285F8A5AA3CADCE5E2F84CF6F2783915F
sha3_384: e4f9f5a8d9260ee533fbd624579280adcf3f015190f9784957658976d364bf416bc60b5661b738b5d216d49db9003a20
ep_bytes: 558bec81ec24060000535633f6576689
timestamp: 2012-05-31 09:22:02

Version Info:
ProductCode: 12B61308-5299-4B85-8B97-DB21F883E138
ProductName: ShapeToDxfV1
ProductVersion: 1.0.4.0
FileDescription: Installer
FileVersion: 2015.3.18.1555
InternalName: TSULoader
OriginalFilename: TSULoader.exe
PackageCode: 3E69B135-D28E-262C-350C-DCE780A5700D
Arguments: 
SpecialBuild: 
Comments: WinNT (x86) Unicode Lib Rel
CompanyName: Ransen Software
LegalCopyright: (c) 2015 Ransen Software.  All rights reserved.
Email: help@ransen.com
WebSite: http://www.ransen.com
Translation: 0x0000 0x04b0

UDS:Downloader.Win32.InstallMeta.b also known as:

How to remove UDS:Downloader.Win32.InstallMeta.b?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.