Win32:MultiPlug-PU [PUP] removal instruction

The Win32:MultiPlug-PU [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:MultiPlug-PU [PUP] virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:MultiPlug-PU [PUP]?


File Info:
name: 037CB50F690516D0997E.mlw
path: /opt/CAPEv2/storage/binaries/1fa53046fd36fb9b3925995cee2852351d75118d958591bd4462b8a6f886c6d4
crc32: E039D1F9
md5: 037cb50f690516d0997e4110d11472f8
sha1: 5d2db13c8c483b66f46e47902d9aeeaf4ea08676
sha256: 1fa53046fd36fb9b3925995cee2852351d75118d958591bd4462b8a6f886c6d4
sha512: 0bb838b2d4e3b302d1396e53c83ca0661bd48953be719b98928ad9b34404dcf6a99e85385a7dc6e6a2e9c84be02d68f8d7c0936141a82c551bf01bdf718e18c7
ssdeep: 1536:YC1MqmRzB+0ihT5RJ2EzkjZ0vBJ52zq9aGgUjfS3:/MvBrivRJ28CZEcGg8q3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16B63076ADA41D763DC121032C6C56AE348364F306D30C9C7AED20C5D7E72B9A8ED972B
sha3_384: 53ae3ff9146f2107337a25d27b71c98b2f4f7436334689d56203f17c515432243dee9ac965fae184a9808a547511a5b9
ep_bytes: 
timestamp: 2013-04-03 04:39:51

Version Info:
0: [No Data]

Win32:MultiPlug-PU [PUP] also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.MultiPlug.2!c
FireEye	Generic.mg.037cb50f690516d0
Skyhigh	BehavesLike.Win32.Generic.kh
Zillya	Adware.MultiPlug.Win32.512101
Sangfor	Trojan.Win32.Agent.Vw99
Baidu	Win32.Adware.Generic.bb
SUPERAntiSpyware	PUP.MultiPlug/Variant
Avast	Win32:MultiPlug-PU [PUP]
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	not-a-virus:AdWare.MultiPlug
Google	Detected
Varist	W32/S-d16ac9fc!Eldorado
Antiy-AVL	Trojan/Win32.Waski.a
Kingsoft	malware.kb.a.982
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
VBA32	Heur.Malware-Cryptor.Multiplug
Malwarebytes	Generic.Malware.AI.DDS
Rising	Trojan.Generic@AI.100 (RDML:p4mEQZw+6URMSMxy+FNOlA)
MaxSecure	Adware.MultiPlug.OFDZ
AVG	Win32:MultiPlug-PU [PUP]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Win32:MultiPlug-PU [PUP]?

Win32:MultiPlug-PU [PUP] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X