PUA.Win32.Bundler.AI

Publish Date: 20 agosto 2019

Modificato da: : Jay Garcia

IStartSurf. (McAfee); Hoax.Win32.Caramba.d (Kaspersky)

Piattaforma:

Windows

Valutazione del rischio complessivo:

Potenziale dannoso: :

Potenziale di distribuzione: :

Reported Infection:

Basso

Medio

Alto

Critico

Tipo di minaccia informatica:
Potentially Unwanted Application
Distruttivo?:
No
Crittografato?:
In the wild::
Sì

Panoramica e descrizione

Dettagli tecnici

Dimensione file: 941,784 bytes

Tipo di file: EXE

Residente in memoria: Sì

Data di ricezione campioni iniziali: 20 agosto 2019

Instalación

Infiltra los archivos siguientes:

%Program Files%\AVAST Software\Avast\setup\jrog2-65.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_bpc-7e7.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_cleanup_x86-7d0.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_datascan_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_gamingmode-837.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_idp_x86-836.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_pwdman-848.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_pwdman_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_rescuedisk_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_safeprice-7d6.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_secdns_hlp_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_swhealth_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_cmp_webrep-820.vpx
%Program Files%\AVAST Software\Avast\setup\ais_core-8a0.vpx
%Program Files%\AVAST Software\Avast\setup\ais_dll_eng-882.vpx
%Program Files%\AVAST Software\Avast\setup\ais_dll_eng_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_gen_core_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\ais_gen_crt_x86-827.vpx
%Program Files%\AVAST Software\Avast\setup\ais_gen_openssl_x86-7ce.vpx
%Program Files%\AVAST Software\Avast\setup\ais_gen_streamfilter_x86-890.vpx
%Program Files%\AVAST Software\Avast\setup\ais_gen_tools-88d.vpx
%Program Files%\AVAST Software\Avast\setup\ais_gen_tools_x86-88d.vpx
%Program Files%\AVAST Software\Avast\setup\ais_res-8a0.vpx
%Program Files%\AVAST Software\Avast\setup\ais_x86-7eb.vpx
%Program Files%\AVAST Software\Avast\setup\avbugreport_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\avdump_x86_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\instcont_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\instup_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\offertool_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\sbr_x86_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\setgui_ais-954.vpx
%Program Files%\AVAST Software\Avast\setup\vps_binaries-65.vpx
%Program Files%\AVAST Software\Avast\setup\vps_binaries_32-65.vpx
%Program Files%\AVAST Software\Avast\setup\vps_defs_common-65.vpx
%Program Files%\AVAST Software\Avast\setup\vps_tools_32-65.vpx
%Program Files%\AVAST Software\Avast\aswcml.dll
%Program Files%\AVAST Software\Avast\aswsys.dll
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswbdisk.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswbidsdriver.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswbidsh.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswbuniv.sys
%Program Files%\AVAST Software\Avast\BrowserCleanup.ini
%Program Files%\AVAST Software\Avast\TuneupBin\TuneupSmartScan.dll
%Program Files%\AVAST Software\Avast\aswDataScan.dll
%Program Files%\AVAST Software\Avast\dnd_helper.dll
%Program Files%\AVAST Software\Avast\gaming_hook.exe
%ProgramData%\AVAST Software\Avast\gaming_mode\dnddetection.dat
%ProgramData%\AVAST Software\Avast\gaming_mode\dnddetection.dat.ver
%ProgramData%\AVAST Software\Avast\gaming_mode\dndrules.dat
%ProgramData%\AVAST Software\Avast\gaming_mode\dndrules.dat.ver
%Program Files%\AVAST Software\Avast\gaming_mode.dll
%Program Files%\AVAST Software\Avast\gaming_mode_ui.dll
%Program Files%\AVAST Software\Avast\gaming_probe.dll
%Program Files%\AVAST Software\Avast\aswhook.dll
%ProgramData%\AVAST Software\Avast\cfg\idplog.cfg
%ProgramData%\AVAST Software\Avast\cfg\privlog.cfg
%ProgramData%\AVAST Software\Avast\cfg\remlog.cfg
%ProgramData%\AVAST Software\Avast\cfg\secapilog.cfg
%Program Files%\AVAST Software\Avast\aswcomm.dll
%Program Files%\AVAST Software\Avast\aswdetallocator.dll
%Program Files%\AVAST Software\Avast\aswidplog.dll
%Program Files%\AVAST Software\Avast\aswidpm.dll
%Program Files%\AVAST Software\Avast\aswidsagent.exe
%Program Files%\AVAST Software\Avast\aswntsqlite.dll
%Program Files%\AVAST Software\Avast\aswpsic.dll
%Program Files%\AVAST Software\Avast\aswremoval.dll
%Program Files%\AVAST Software\Avast\aswsecapi.dll
%Program Files%\AVAST Software\Avast\aswwinamapi.dll
%Program Files%\AVAST Software\Avast\vaarclient.dll
%Program Files%\AVAST Software\Avast\pam.ico
%ProgramData%\AVAST Software\Avast\pam\pam.json
%Program Files%\AVAST Software\Avast\pam.dll
%Program Files%\AVAST Software\Avast\RescueDisk\AvastPE2.exe
%Program Files%\AVAST Software\Avast\RescueDisk\Base.dll
%Program Files%\AVAST Software\Avast\RescueDisk\aswRegLib.dll
%Program Files%\AVAST Software\Avast\RescueDisk\aswShMin.exe
%Program Files%\AVAST Software\Avast\RescueDisk\uiLangRes.dll
%Program Files%\AVAST Software\Avast\RescueDisk\waikx86.mst
%Program Files%\AVAST Software\Avast\rescue_disk.dll
%Program Files%\AVAST Software\Avast\setup\CRT\InstallCrt.exe
%Program Files%\AVAST Software\Avast\SafePrice\FF\sp@avast.com.xpi
%Program Files%\AVAST Software\Avast\aswSecDns.dll
%Program Files%\AVAST Software\Avast\snxhk.dll
%ProgramData%\AVAST Software\Avast\snx_gconfig.xml
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswSnx.sys
%Program Files%\AVAST Software\Avast\asulaunch.exe
%Program Files%\AVAST Software\Avast\aswPatchMgt.dll
%Program Files%\AVAST Software\Avast\WebRep\FF\wrc@avast.com.xpi
%Program Files%\AVAST Software\Avast\1033\aswClnTg.htm
%Program Files%\AVAST Software\Avast\1033\aswClnTg.txt
%Program Files%\AVAST Software\Avast\1033\aswInfTg.htm
%Program Files%\AVAST Software\Avast\1033\aswInfTg.txt
%Program Files%\AVAST Software\Avast\1033\Base.dll
%Program Files%\AVAST Software\Avast\1033\Boot.dll
%Program Files%\AVAST Software\Avast\1033\uiLangRes.dll
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswArDisk.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswArPot.sys
%Program Files%\AVAST Software\Avast\Licenses\Boost.txt
%Program Files%\AVAST Software\Avast\Licenses\Detours.txt
%Program Files%\AVAST Software\Avast\Licenses\EULA.txt
%Program Files%\AVAST Software\Avast\Licenses\LZMA.txt
%Program Files%\AVAST Software\Avast\Licenses\bsdiff.txt
%Program Files%\AVAST Software\Avast\Licenses\bzip2.txt
%Program Files%\AVAST Software\Avast\Licenses\c-ares.txt
%Program Files%\AVAST Software\Avast\Licenses\cURL.txt
%Program Files%\AVAST Software\Avast\Licenses\mbedTLS.txt
%Program Files%\AVAST Software\Avast\Licenses\protobuf.txt
%Program Files%\AVAST Software\Avast\Licenses\zlib.txt
%Program Files%\AVAST Software\Avast\AavmRpch.dll
%Program Files%\AVAST Software\Avast\ashShell.dll
%Program Files%\AVAST Software\Avast\aswAMSI.dll
%Program Files%\AVAST Software\Avast\aswBrowser.dll
%Program Files%\AVAST Software\Avast\aswCmnIS.dll
%Program Files%\AVAST Software\Avast\aswCmnOS.dll
%Program Files%\AVAST Software\Avast\aswProperty.dll
%Program Files%\AVAST Software\Avast\aswPropertyAv.dll
%Program Files%\AVAST Software\Avast\dll_loader.dll
%Program Files%\AVAST Software\Avast\firefox_pass.dll
%ProgramData%\AVAST Software\Avast\Fonts\OpenSans-Bold.ttf
%ProgramData%\AVAST Software\Avast\Fonts\OpenSans-Italic.ttf
%ProgramData%\AVAST Software\Avast\Fonts\OpenSans-Light.ttf
%ProgramData%\AVAST Software\Avast\Fonts\OpenSans-Regular.ttf
%ProgramData%\AVAST Software\Avast\Fonts\RobotoCondensed-Bold.ttf
%ProgramData%\AVAST Software\Avast\Fonts\RobotoCondensed-Regular.ttf
%ProgramData%\AVAST Software\Avast\Fonts\proximanova-bold.otf
%ProgramData%\AVAST Software\Avast\Fonts\proximanova-light.otf
%ProgramData%\AVAST Software\Avast\Fonts\proximanova-regular.otf
%ProgramData%\AVAST Software\Avast\avast5.ini
%Program Files%\AVAST Software\Avast\setup\settings-954.ori
%Program Files%\AVAST Software\Avast\AvastSvc.exe
%Program Files%\AVAST Software\Avast\wsc_proxy.exe
%Program Files%\AVAST Software\Avast\Aavm4h.dll
%Program Files%\AVAST Software\Avast\AvEmUpdate.exe
%Program Files%\AVAST Software\Avast\AvastNM.exe
%Program Files%\AVAST Software\Avast\CommChannel.dll
%Program Files%\AVAST Software\Avast\CommonRes.dll
%Program Files%\AVAST Software\Avast\VisthAux.exe
%Program Files%\AVAST Software\Avast\anen.dll
%Program Files%\AVAST Software\Avast\ashBase.dll
%Program Files%\AVAST Software\Avast\ashQuick.exe
%Program Files%\AVAST Software\Avast\ashServ.dll
%Program Files%\AVAST Software\Avast\ashTask.dll
%Program Files%\AVAST Software\Avast\ashTaskEx.dll
%Program Files%\AVAST Software\Avast\ashUpd.exe
%Program Files%\AVAST Software\Avast\aswAux.dll
%Program Files%\AVAST Software\Avast\aswChLic.exe
%Program Files%\AVAST Software\Avast\aswCmnBS.dll
%Program Files%\AVAST Software\Avast\aswData.dll
%Program Files%\AVAST Software\Avast\aswDld.dll
%Program Files%\AVAST Software\Avast\aswEngLdr.dll
%Program Files%\AVAST Software\Avast\aswEngSrv.exe
%Program Files%\AVAST Software\Avast\aswIP.dll
%Program Files%\AVAST Software\Avast\aswLog.dll
%Program Files%\AVAST Software\Avast\aswRvrt.dll
%Program Files%\AVAST Software\Avast\aswSqLt.dll
%Program Files%\AVAST Software\Avast\aswStrm.dll
%Program Files%\AVAST Software\Avast\aswUtil.dll
%Program Files%\AVAST Software\Avast\aswW8ntf.dll
%Program Files%\AVAST Software\Avast\browser_pass.dll
%Program Files%\AVAST Software\Avast\burger_client.dll
%Program Files%\AVAST Software\Avast\custody.dll
%Program Files%\AVAST Software\Avast\event_manager.dll
%Program Files%\AVAST Software\Avast\event_manager_burger.dll
%Program Files%\AVAST Software\Avast\event_manager_er.dll
%Program Files%\AVAST Software\Avast\event_manager_ga.dll
%Program Files%\AVAST Software\Avast\event_routing.dll
%Program Files%\AVAST Software\Avast\event_routing_rpc.dll
%Program Files%\AVAST Software\Avast\features_manager.dll
%Program Files%\AVAST Software\Avast\ffl2.dll
%Program Files%\AVAST Software\Avast\fltlib_wrapper.dll
%Program Files%\AVAST Software\Avast\gui_cache.dll
%Program Files%\AVAST Software\Avast\health.dll
%Program Files%\AVAST Software\Avast\lim.dll
%Program Files%\AVAST Software\Avast\log.dll
%Program Files%\AVAST Software\Avast\module_lifetime.dll
%Program Files%\AVAST Software\Avast\network_notifications.dll
%Program Files%\AVAST Software\Avast\process_monitor.dll
%Program Files%\AVAST Software\Avast\ring_client.dll
%Program Files%\AVAST Software\Avast\sched.exe
%Program Files%\AVAST Software\Avast\serialization.dll
%Program Files%\AVAST Software\Avast\shepherdsync.dll
%Program Files%\AVAST Software\Avast\streamback.dll
%Program Files%\AVAST Software\Avast\tasks_core.dll
%Program Files%\AVAST Software\Avast\wsc.dll
%Program Files%\AVAST Software\Avast\wsc_proxy.exe.manifest
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswBoot.exe
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\Avast.VC140.CRT.cat
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\Avast.VC140.CRT.manifest
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-console-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-datetime-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-debug-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-errorhandling-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-file-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-file-l1-2-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-file-l2-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-handle-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-heap-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-interlocked-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-libraryloader-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-localization-l1-2-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-memory-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-namedpipe-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-processenvironment-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-processthreads-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-processthreads-l1-1-1.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-profile-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-rtlsupport-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-string-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-synch-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-synch-l1-2-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-sysinfo-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-timezone-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-util-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-conio-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-convert-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-environment-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-filesystem-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-heap-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-locale-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-math-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-multibyte-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-private-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-process-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-runtime-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-stdio-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-string-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-time-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-utility-l1-1-0.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\concrt140.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\msvcp140.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\ucrtbase.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\x86\vcruntime140.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\Avast.VC140.MFC.cat
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\Avast.VC140.MFC.manifest
%Program Files%\AVAST Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\mfc140u.dll
%Program Files%\AVAST Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\x86\Policy.14.0.Avast.VC140.CRT.cat
%Program Files%\AVAST Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\x86\Policy.14.0.Avast.VC140.CRT.manifest
%Program Files%\AVAST Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\x86\Policy.14.0.Avast.VC140.MFC.cat
%Program Files%\AVAST Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\x86\Policy.14.0.Avast.VC140.MFC.manifest
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswHdsKe.sys
%Program Files%\AVAST Software\Avast\hns_tools.dll
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswKbd.sys
%Program Files%\AVAST Software\Avast\libcrypto-1_1.dll
%Program Files%\AVAST Software\Avast\libssl-1_1.dll
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswRdr2.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswMonFlt.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswRvrt.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswSP.sys
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswStm.sys
%Program Files%\AVAST Software\Avast\AvDump.exe
%Program Files%\AVAST Software\Avast\RegSvr.exe
%Program Files%\AVAST Software\Avast\aswRunDll.exe
%Program Files%\AVAST Software\Avast\AvBugReport.exe
%Program Files%\AVAST Software\Avast\SetupInf.exe
%Program Files%\AVAST Software\Avast\setup\overseer.exe
%Program Files%\AVAST Software\Avast\aswVmm.dll
%Program Files%\AVAST Software\Avast\setup\Inf\x86\aswVmm.sys
%Program Files%\AVAST Software\Avast\asOutExt.dll
%ProgramData%\AVAST Software\Avast\HtmlData\Blocked.htm
%ProgramData%\AVAST Software\Avast\HtmlData\image001.png
%Program Files%\AVAST Software\Avast\setup\AvBugReport.exe
%Program Files%\AVAST Software\Avast\setup\AvDump.exe
%Program Files%\AVAST Software\Avast\setup\instup.exe
%Program Files%\AVAST Software\Avast\setup\instup.dll
%Program Files%\AVAST Software\Avast\setup\aswOfferTool.exe
%Program Files%\AVAST Software\Avast\setup\sbr.exe
%Program Files%\AVAST Software\Avast\setup\HTMLayout.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\Sf2.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswJsFlt.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\ArPot.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\BCUEngine.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\PushPin.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\algo.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswAR.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswArray.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswCleanerDLL.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswCmnBS.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswCmnIS.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswCmnOS.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswEngin.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswFiDb.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswHds.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswRawFS.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswRep.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\aswScan.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\exts.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\fwAux.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\list_d.txt
%Program Files%\AVAST Software\Avast\defs\{random numbers}\swhealthex2.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\uiext.dll
%Program Files%\AVAST Software\Avast\defs\{random numbers}\certs.map
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_ap2.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_array.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_as.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_bank.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_cmd.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_cmd.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_dex.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_dex.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_dsign.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_dyna.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_dyna.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_el.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_elf.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_elf.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_elfa.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_elfa.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_evope.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_java.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_java.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_js.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_js.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_mx4.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_mx4.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_mx95.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_mx95.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_o7.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_o7.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_o7c.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_o7c.map
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_ob2.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_pe.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_pe.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_pe3.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_pph.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_sl.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_sl.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_snh.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_str.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_str.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_swf.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_swf.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_tx.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_u.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_w6.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_w6.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_w6c.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_w6c.map
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_wat.nmp
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_wat.sig
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_wh2.dat
%Program Files%\AVAST Software\Avast\defs\{random numbers}\db_xtn.map
%Program Files%\AVAST Software\Avast\defs\{random numbers}\def.ini
%Program Files%\AVAST Software\Avast\defs\{random numbers}\list_i.txt
%Program Files%\AVAST Software\Avast\defs\{random numbers}\engsup.exe
%Program Files%\Carambis\Driver Updater\imageformats\qico4.dll
%Program Files%\Carambis\Driver Updater\Win32\Installer.exe
%Program Files%\Carambis\Driver Updater\x64\Installer.exe
%Program Files%\Carambis\Driver Updater\dupdater.exe
%Program Files%\Carambis\Driver Updater\htmlayout.dll
%Program Files%\Carambis\Driver Updater\libcurl.dll
%Program Files%\Carambis\Driver Updater\QtCore4.dll
%Program Files%\Carambis\Driver Updater\QtGui4.dll
%Program Files%\Carambis\Driver Updater\QtNetwork4.dll
%Program Files%\Carambis\Driver Updater\QtXml4.dll
%Program Files%\Carambis\Driver Updater\sqlite3.dll
%Program Files%\Carambis\Driver Updater\uninstall.exe

Técnica de inicio automático

Agrega las siguientes entradas de registro para permitir su ejecución automática cada vez que se inicia el sistema:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Driver Updater = "%Program Files%\Carambis\Driver Updater\dupdater.exe" -minimized

Otras modificaciones del sistema

Agrega las siguientes entradas de registro como parte de la rutina de instalación:

HKEY_CURRENT_USER\Software\Carambis

HKEY_CURRENT_USER\Software\Carambis\
Driver Updater

HKEY_CURRENT_USER\Software\Carambis\
Driver Updater\generalSettings

HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software

HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\
Avast

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater

Agrega las siguientes entradas de registro:

HKEY_CURRENT_USER\Software\Carambis\
Driver Updater\generalSettings
scanAtStartupEnabled = true

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
DisplayName = Carambis Driver Updater

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
InstallLocation = %Program Files%\Carambis\Driver Updater

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
DisplayIcon = %Program Files%\Carambis\Driver Updater\dupdater.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
Publisher = ROSTPAY LTD

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
RegCompany = Carambis

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
HelpLink =

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
URLInfoAbout =

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
DisplayVersion = 2.4.4.4634

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
UninstallString = %Program Files%\Carambis\Driver Updater\uninstall.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
NoModify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Driver Updater
NoRepair = 1

HKEY_CURRENT_USER\Software\Carambis\
Driver Updater\generalSettings
launchProgramAtStartupEnabled = true

HKEY_CURRENT_USER\Software\Carambis\
Driver Updater
partnerId = multilang

Soluzioni

Motore di scansione minimo: 9.850

File di pattern SSAPI: 2.205.00

Data di pubblicazione del pattern SSAPI: 15 agosto 2019

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 2

Note that not all files, folders, and registry keys and entries are installed on your computer during this malware's/spyware's/grayware's execution. This may be due to incomplete installation or other operating system conditions. If you do not find the same files/folders/registry information, please proceed to the next step.

Step 3

Reiniciar en modo seguro

[ learnMore ]

Step 4

Quitar PUA.Win32.Bundler.AI por medio de su propia opción de desinstalación

[ learnMore ]

Para desinstalar el proceso de grayware

Step 5

Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como PUA.Win32.Bundler.AI En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.

Sondaggio

PUA.Win32.Bundler.AI

Panoramica e descrizione

Dettagli tecnici

Soluzioni

Risorse

Assistenza

Informazioni su Trend

PUA.Win32.Bundler.AI

Panoramica e descrizione

Dettagli tecnici

Soluzioni

Risorse

Assistenza

Informazioni su Trend

America

Medio Oriente e Africa

Europa

Asia e Pacifico