Generic PUA AB (PUA) removal tips

The Generic PUA AB (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA AB (PUA) virus can do?

• Executable code extraction
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• Drops a binary and executes it
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Network activity contains more than one unique useragent.
• Attempts to modify proxy settings
• Anomalous binary characteristics

Related domains:

How to determine Generic PUA AB (PUA)?

File Info:
crc32: 09BEC85D
md5: b7c33ae1c08386f64b41eb682a999f07
name: sogoucokab.e
sha1: 0193e11311d4a0f03bb455c3457d70be5b3d808d
sha256: 9580eaaaaf4bccb887119e1a9c5a5cdfd937a8b35130970a47666d56474871c5
sha512: 734f487af51393ff9fa9241f601827bea68c8927db45817c21ed4da59f689db26d4c14d4a0b92c3e4bb5cbdcdede2edb3ce502dcd882e6a5e06047c39ef1567b
ssdeep: 49152:guuE7AnqIxGrGYyZa/tgrYJUGfZC3wA6EylfwEaFW:KE7AqrlyutLxC3sEwwM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2014 Sogou.com Inc. All rights reserved.
InternalName: MiniDownLoad.exe
FileVersion: 3.1.12.94
CompanyName: Sogou.com Inc.
ProductName: x8f6fx4ef6x52a9x624b
ProductVersion: 3.1.12.94
FileDescription: x8f6fx4ef6x52a9x624b
OriginalFilename: MiniDownLoad.exe
Translation: 0x0804 0x04b0

Generic PUA AB (PUA) also known as:

How to remove Generic PUA AB (PUA)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.