Adware.Puamson (file analysis)

The Adware.Puamson is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Puamson virus can do?

• Creates RWX memory
• Dynamic (imported) function loading detected
• Unconventionial language used in binary resources: Spanish (Modern)
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Adware.Puamson?

File Info:
name: F10CA009E73967904AC9.mlw
path: /opt/CAPEv2/storage/binaries/bb2e92c6c1b533cec5a122bc9228c600c03feebaa78c4bcb3abdc064e186622c
crc32: 6D08FCC0
md5: f10ca009e73967904ac9c9b490592ab3
sha1: 09450c0c6e38e4d0fb34ef60bf9c37093f5af255
sha256: bb2e92c6c1b533cec5a122bc9228c600c03feebaa78c4bcb3abdc064e186622c
sha512: 2a2bdb2e8e66b618a115c7e37fd5678e20a28a5e229e02d7b0ef524552f48bd72b02e2cbb229daed1efc0145382d76cfd0abdc4a2a184752849ef180c2c8c2c3
ssdeep: 12288:XtC3gr3sqqN9FIbva1ODNjgc7RdJPvZBvSaY2meXSqi/yNRuAeehQ5:Q3oRqNIbvaoprthBvSaY2mefBNRnZhQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T146154A13B290143BC1761E3A59679360A93FBE342B9A785F1EF40D8E4F792412C3E676
sha3_384: 7259cdc7cc692e1c77803d31dfcb052681135d8a112feef384d50a118c2f6960ce50582e06070d35c8b456313844066c
ep_bytes: 558bec83c4f0b8e40c4c00e83837f4ff
timestamp: 2021-05-20 11:02:16

Version Info:
CompanyName: MS Sistemas
FileDescription: Block_file
FileVersion: 1.0.0.0
InternalName: Block_file
LegalCopyright: MS Sistemas
LegalTrademarks: MS Sistemas
OriginalFilename: Block_file
ProductName: Block_file
ProductVersion: 1.0.0.0
Comments: Block_file
Translation: 0x0c0a 0x04e4

Adware.Puamson also known as:

How to remove Adware.Puamson?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.