What is “Win32/LuluSoftware.F potentially unwanted”?

The Win32/LuluSoftware.F potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/LuluSoftware.F potentially unwanted virus can do?

• Sample contains Overlay data
• Presents an Authenticode digital signature
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Attempts to modify proxy settings
• Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/LuluSoftware.F potentially unwanted?

File Info:
name: 3CC9E4C12B4A57624527.mlw
path: /opt/CAPEv2/storage/binaries/b447ad626623e2695c161e7ed4c462771d113f97b8f96cbe2f75217c868f8c29
crc32: 8DDE3860
md5: 3cc9e4c12b4a57624527ae2564ffdf24
sha1: ea05fba4438fda2809b03b897ba90e897854bfa3
sha256: b447ad626623e2695c161e7ed4c462771d113f97b8f96cbe2f75217c868f8c29
sha512: 482888b0b7d0e668a4ec17f7df9aee0ccf90b36dc7406757810bd22bc767937c47afd734ab8747a29ba319a78ce409dc7de9c3427566eba1ca67fc494d54d436
ssdeep: 393216:dffXmmWH1sAsqvrqNl/l1PumLcBoMIB+4JVTMcBoMIB+dJQ9:BXDWH1sA+d1GQcBoMIB+4AcBoMIB+dU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A9E6DF11BA42C136D6D101B0697DAFBE847DEE284B7045CBA3D01F6D59326D33A36F2A
sha3_384: ff43d1fda91b3782f39cd641c21ba3c431ecdf5843451ccaabc52496c4cd82021ca30fd5a7de85fee3d60d5aabe581a8
ep_bytes: e80e0e0000e984feffffcccccccccccc
timestamp: 2019-06-14 08:25:54

Version Info:
FileVersion: 11.1.9.1699
ProductVersion: 11.1.9.1699
CompanyName: LULU Software
FileDescription: Soda PDF Desktop 11 Installer
InternalName: Soda_PDF_Desktop_11_Installer.exe
LegalCopyright: (c) 2010-2019 LULU Software. All rights reserved.
OriginalFilename: Soda_PDF_Desktop_11_Installer.exe
ProductName: Soda PDF Desktop 11 Installer
CommitID: ea73d2ca7a1ec689aa7d3931c323c0fbb1719308
Translation: 0x0409 0x04e4

Win32/LuluSoftware.F potentially unwanted also known as:

How to remove Win32/LuluSoftware.F potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.