Categories: PUA

What is “CloudGuard (PUA)”?

The CloudGuard (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What CloudGuard (PUA) virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine CloudGuard (PUA)?


File Info:

crc32: 6305984Dmd5: a4bb509c0a331534092ea265408e3e1fname: A4BB509C0A331534092EA265408E3E1F.mlwsha1: f79cbb8e02f9176d3852194a08636d9ae79b8bc4sha256: dd17cca47b88fdda86f36946403b49fd9251ad68e8db8bbb500cf84993b3a3afsha512: 972da6dac190311c47cda276bd19d6617038a0e1ed42a33df463caa0aaaed6a71275db42c3bf614725b07aa026e023a93ec1d34957c307d313d8c78b9829d3a6ssdeep: 24576:lN+aLo2+NFZqeI+8NFZqe50hNxKQVzl0H:+4+PZqed8PZqeYK+ltype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0LegalCopyright: Copyright CC xa92017 .Assembly Version: 1.3.1.8InternalName: France.exeFileVersion: 1.3.1.8CompanyName: prest ltdLegalTrademarks: prestComments: prestProductName: prest Client ProductVersion: 1.3.1.8FileDescription: prestOriginalFilename: France.exe

CloudGuard (PUA) also known as:

K7AntiVirus Adware ( 005465501 )
Elastic malicious (high confidence)
DrWeb Trojan.Siggen7.34782
Cynet Malicious (score: 99)
ALYac Gen:Variant.Bulz.662146
Cylance Unsafe
Zillya Adware.CloudScout.Win32.302
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (D)
Alibaba AdWare:MSIL/CloudGuard.19a14003
K7GW Adware ( 005465501 )
Cybereason malicious.c0a331
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Adware.CloudGuard.D
APEX Malicious
Avast Win32:Adware-gen [Adw]
BitDefender Gen:Variant.Bulz.662146
NANO-Antivirus Riskware.Win32.CloudScout.exvdyf
MicroWorld-eScan Gen:Variant.Bulz.662146
Tencent Malware.Win32.Gencirc.11491f21
Ad-Aware Gen:Variant.Bulz.662146
Sophos CloudGuard (PUA)
Comodo ApplicUnwnt@#k9y22poy7qp7
BitDefenderTheta Gen:NN.ZemsilF.34170.tn0@amh4uip
VIPRE CloudScout
McAfee-GW-Edition PUP-XDW-PK
FireEye Generic.mg.a4bb509c0a331534
Emsisoft Gen:Variant.Bulz.662146 (B)
SentinelOne Static AI – Malicious PE
Jiangmin AdWare.CloudScout.ao
Avira ADWARE/CloudGuard.Gen
Antiy-AVL Trojan/Generic.ASMalwS.2448E76
Microsoft Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware Adware.CloudGuard/Variant
GData Gen:Variant.Bulz.662146
AhnLab-V3 PUP/Win32.CloudGuard.R222514
McAfee PUP-XDW-PK
MAX malware (ai score=100)
VBA32 AdWare.CloudScout
Malwarebytes Generic.Trojan.Malicious.DDS
Panda Trj/GdSda.A
Yandex PUA.CloudScout!G5f9Ku/AFFU
Ikarus AdWare.MSIL.Cloudguard
Fortinet Adware/CloudGuard
AVG Win32:Adware-gen [Adw]
Paloalto generic.ml

How to remove CloudGuard (PUA)?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

3 hours ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

3 hours ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

3 hours ago