Categories: PUA

ExeScript (PUA) removal instruction

The ExeScript (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ExeScript (PUA) virus can do?

A process created a hidden window
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Network activity detected but not expressed in API logs

How to determine ExeScript (PUA)?


File Info:
crc32: D44D3A20md5: c987da1c98da4ecabb0167596a790ddaname: C987DA1C98DA4ECABB0167596A790DDA.mlwsha1: 8196c0178c6ab0da6391c0b2e9530ed288d7e4adsha256: 6b90feecd001c4a396abe6a195c41db8d4c9b17bbd55b33fcf6b208690fbfb8asha512: 071da001c3e23809085f461f246b86322eb91b3d79f093c84a60b427e11e898b99f2a237962eaa4224033f2f925f365ffbeb60a8b66936261da08ee629f83c28ssdeep: 768:j0ExfpdfFKwq0QeSaveaVCdMBnKimiOm9+2O8GsULdyJe2SVR:j0gfrF4laeawMgimD2OCNJeJtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

ExeScript (PUA) also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 004ba1091 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop11.50247
Cylance	Unsafe
Sangfor	Trojan.Win32.Occamy.C6B
Alibaba	Packed:Win32/ExeScript.224e3842
K7GW	Trojan ( 004ba1091 )
Cybereason	malicious.78c6ab
Cyren	W32/CookieStealer.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.ExeScript.B
APEX	Malicious
Avast	Win32:Trojan-gen
NANO-Antivirus	Trojan.Win32.Drop.hfcvkl
ViRobot	Backdoor.Win32.Agent.90112.H[UPX]
Sophos	ExeScript (PUA)
Comodo	TrojWare.Win32.Downloader.Agent.LSD@83ak
McAfee-GW-Edition	BehavesLike.Win32.Trojan.ph
FireEye	Generic.mg.c987da1c98da4eca
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_96%
Antiy-AVL	Trojan/Generic.ASMalwS.140D1F
Microsoft	Trojan:Win32/Occamy.C6B
SUPERAntiSpyware	Trojan.Agent/Gen-KillAV
GData	Win32.Trojan.PSE.1NCYJWB
AhnLab-V3	Malware/Win32.Generic.C4036650
Acronis	suspicious
McAfee	Artemis!C987DA1C98DA
VBA32	Backdoor.Agent
Ikarus	Trojan.Win32.ExeScript
MaxSecure	Trojan.Malware.7175203.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Trojan-gen
Paloalto	generic.ml