Generic PUA BC (PUA) information

The Generic PUA BC (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA BC (PUA) virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.

Related domains:

tjv1.ejie.me

config.ejie.me

How to determine Generic PUA BC (PUA)?


File Info:
crc32: AF6E454B
md5: 3a1d54dee99918c2af2ad0c1bf154206
name: setup_clover_3.4.0.exe
sha1: da8190c58c9e59dc5ff10a3022ea52946eaf1a85
sha256: ca9210b7f807d65ff530f13c5a4a4d0518535d23655ea10fdaf80b8c173bef5b
sha512: 68f2cdc0307dc0960b5f6c855902d3b3881dcaa9cff1d1541dae875066a508c2b61bee99471515def5ed0843c9c44a4fb19c0a82ca58d56718a31eb1a6401f64
ssdeep: 98304:TTq71cERVXnTGc/LqDT3hGX/tzJ0dluJMSg04GG5IOsD4gw/qU8W8sAD50ucbuDG:TUTRVXnTHTbVJ0aD3FaL/bZ850ucbuDG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: Clover
FileVersion: 3.4.0.09281
CompanyName: ejie.me
Comments: Clover x5b89x88c5x7a0bx5e8f
ProductName: Clover
ProductVersion: 3.4.0.09281
FileDescription: Clover x5b89x88c5x7a0bx5e8f
OriginalFilename: Clover.exe
Translation: 0x0804 0x03a8

Generic PUA BC (PUA) also known as:

Bkav	W32.HfsAdware.DA20
DrWeb	Adware.Softcnapp.61
Cylance	Unsafe
Zillya	Adware.SoftcnappCRTD.Win32.397
Alibaba	AdWare:Win32/Softcnapp.295d3003
Invincea	heuristic
APEX	Malicious
ClamAV	Win.Malware.Agent-6375981-0
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Burden.gen
NANO-Antivirus	Riskware.Win32.Softcnapp.eyvhex
AegisLab	Adware.Win32.Burden.2!c
Comodo	Malware@#31u1wlpvuxflb
F-Secure	PotentialRisk.PUA/SoftCnapp.IK
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	PUA.Win32.Softcnapp.GA
McAfee-GW-Edition	Adware-Clover
Sophos	Generic PUA BC (PUA)
eGambit	Unsafe.AI_Score_99%
Avira	PUA/SoftCnapp.QW
Microsoft	PUA:Win32/Softcnapp
Endgame	malicious (high confidence)
ViRobot	Adware.Softcnapp.6219552
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Burden.gen
GData	Win32.Application.Agent.6F9R0F
VBA32	BScope.Adware.Presenoker
Malwarebytes	Adware.ChinAd
ESET-NOD32	a variant of Win32/Softcnapp.J potentially unwanted
TrendMicro-HouseCall	PUA.Win32.Softcnapp.GA
Yandex	Riskware.Agent!
Ikarus	PUA.Softcnapp
Fortinet	Riskware/Softcnapp

How to remove Generic PUA BC (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic PUA BC (PUA) information