SoftwareBundler:Win32/DealPly

SoftwareBundler:Win32/DealPly also known as a variant of Win32/InstallCore.CF, Unwanted-Program.

Malware Analysis of SoftwareBundler:Win32/DealPly

Created files:

%Temp%\ish35390\sdk\exceptlist.txt
%Desktop%\Continue Download Helper Installation.lnk
%Temp%\ICReinstall_2ab6a98b2285084f3b4c44f2e28ed78b.exe
%Temp%\is1326335552\36019_Setup.EXE
%Temp%\is1326335552\36019_Setup.EXE.part

Detected by UnHackMe:

ICREINSTALL_2AB6A98B2285084F3B4C44F2E28ED78B.EXE
Default location: %TEMP%\ICREINSTALL_2AB6A98B2285084F3B4C44F2E28ED78B.EXE

Written by 

Malware Hunter.

Leave a Reply

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera