PUA

Should I remove “CsdiMonetize (PUA)”?

Malware Removal

The CsdiMonetize (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What CsdiMonetize (PUA) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to identify installed analysis tools by registry key
  • Detects VMware through the presence of a registry key

Related domains:

www.csdimonetize.com

How to determine CsdiMonetize (PUA)?



File Info:

crc32: 3F0A76CC
md5: 94471077a8c09a84dd97abc839c1a5ea
name: 94471077A8C09A84DD97ABC839C1A5EA.mlw
sha1: a2c8d0fb0fc5690d75556f2ef70c5f8a29b716fc
sha256: f89de004057b37ed8bb8c4f390d4c0ac54a9fd7ad59fbe012d91a7aa8515ec6e
sha512: 0553660c8f9a0c9e844df75d5e986ee38c9332d0c4f1551c6a94d2901008e8f7d05c96c8a4ae145e697d359079f479c7edd4d6ab1229c6787b81d2ad89250085
ssdeep: 6144:HT+uL5Xu/7+QxDiM5snMvB0EmKLZPDvOBpqgOMUXu/7+QxDiM5snMvB0EmKLZPD:zA7hf3bvOBpXh7hf3bvOBpXnfv2km
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 4.123.0.0
InternalName: Wizzupdater.exe
FileVersion: 1.0.0.0
CompanyName: dffgghh
LegalTrademarks: 
Comments: ghhghga
ProductName: QSDFR
ProductVersion: 1.0.0.0
FileDescription: rtreert
OriginalFilename: Wizzupdater.exe

CsdiMonetize (PUA) also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Application.Bundler.Temonde.1
FireEyeGeneric.mg.94471077a8c09a84
ALYacGen:Application.Bundler.Temonde.1
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
K7AntiVirusAdware ( 0054519c1 )
BitDefenderGen:Application.Bundler.Temonde.1
K7GWAdware ( 0054519c1 )
Cybereasonmalicious.7a8c09
CyrenW32/S-e57399b6!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:InstallCube-JS [Adw]
ClamAVWin.Adware.SpywareJarl-4
Kasperskynot-a-virus:HEUR:Downloader.MSIL.Temonde.gen
AlibabaDownloader:MSIL/Temonde.3fe4cb57
NANO-AntivirusTrojan.Win32.Temonde.earxpe
TencentMalware.Win32.Gencirc.10b3845b
Ad-AwareGen:Application.Bundler.Temonde.1
EmsisoftGen:Application.Bundler.Temonde.1 (B)
ComodoTrojWare.MSIL.Perseus.DA@67ix0t
F-SecureHeuristic.HEUR/AGEN.1123816
DrWebAdware.Eorezo.817
TrendMicroHT_TEMONDE_FB2400F9.UVPM
McAfee-GW-EditionPUP-XCD-OF
SophosCsdiMonetize (PUA)
IkarusAdWare.MSIL.Csdimonetize
JiangminDownloader.MSIL.lu
AviraHEUR/AGEN.1123816
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftSoftwareBundler:MSIL/Wizrem
GridinsoftAdware.Win32.Downloader.oa
ArcabitApplication.Bundler.Temonde.1
ZoneAlarmnot-a-virus:HEUR:Downloader.MSIL.Temonde.gen
GDataGen:Application.Bundler.Temonde.1
CynetMalicious (score: 85)
AhnLab-V3PUP/Win32.Bundler.C1919054
Acronissuspicious
McAfeePUP-XCD-OF
MAXmalware (ai score=72)
VBA32Downloader.MSIL.Temonde
MalwarebytesAdware.Tuto4PC
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Adware.CsdiMonetize.A
TrendMicro-HouseCallHT_TEMONDE_FB2400F9.UVPM
RisingTrojan.Win32.Generic.199FF0B1 (C64:YzY0OuOrm5zDtoJg)
YandexTrojan.Perseus!QhP7bir0HQ0
SentinelOneStatic AI – Malicious PE
FortinetRiskware/Temonde
AVGWin32:InstallCube-JS [Adw]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (D)
Qihoo-360HEUR/QVM03.0.Malware.Gen

How to remove CsdiMonetize (PUA)?

CsdiMonetize (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment