Download Assistant (PUA) removal

The Download Assistant (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Download Assistant (PUA) virus can do?

Network activity detected but not expressed in API logs

How to determine Download Assistant (PUA)?


File Info:
crc32: 8BE9CCBD
md5: 59197f9583468e68ae61a5e1a1606e58
name: exloader.rar_6812914.exe
sha1: e06098493aac2a45626a916f7c76b625b56d0734
sha256: 18b7630121359cbfb2ee75bf7af7d96a9e27422b3277c130b42f79ac0fb1dc54
sha512: c544269993e3b0c042f2bc3277e0acf9f663becf06258a04e9653bc0c4da38df7cd8b666a434b9bc7e455442dbab4112d12626d9aabbffe1aeb44a48200d43ed
ssdeep: 98304:8qc4PQOQWGyopQsDBQc7l6a5kwPf+YXQhdgpvSVTMF4QDE+/e836Is2eOOeh:SWNHsDV/PZQopnaQDL/BqC9p
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Download Assistant (PUA) also known as:

Bkav	HW32.Packed.
FireEye	Generic.mg.59197f9583468e68
McAfee	GenericRXJS-VI!59197F958346
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Adware ( 0056214d1 )
K7AntiVirus	Adware ( 0056214d1 )
BitDefenderTheta	Gen:NN.ZexaF.34100.@R0@aakEqvfi
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:AdwareX-gen [Adw]
Kaspersky	not-a-virus:HEUR:Downloader.Win32.Generic
Endgame	malicious (high confidence)
Sophos	Download Assistant (PUA)
F-Secure	Trojan.TR/Crypt.XPACK.Gen3
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Worm.tc
Trapmine	suspicious.low.ml.score
Avira	TR/Crypt.XPACK.Gen3
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.D!ml
AhnLab-V3	PUP/Win32.Installer.R328060
Acronis	suspicious
Malwarebytes	Adware.DownloadAssistant
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/DownloadAssistant.Y potentially unwanted
Rising	PUA.DownloadAssistant!8.182 (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Crypt.GENC!tr
AVG	Win32:AdwareX-gen [Adw]
Cybereason	malicious.93aac2
Qihoo-360	HEUR/QVM19.1.D1C3.Malware.Gen

How to remove Download Assistant (PUA)?

Download Assistant (PUA) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X