PUA

Generic PUA BG (PUA) information

Malware Removal

The Generic PUA BG (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic PUA BG (PUA) virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Generic PUA BG (PUA)?


File Info:

crc32: 37320FC5
md5: 9a5f2d333610b6b8419b57b4e00b6ab3
name: covid-19_informer.exe
sha1: 16cca5791d21ecf3496bcd9add61ce2988a0d12f
sha256: ae928d2fa129cdfa1a61b5ef11f085c3fcc20f225aaacfe50ea431094a29038f
sha512: 564bc1c9de99cb540a4d8399231712eff1db598d786828c2cc72369bfd5db6698970526d2ad27a0d0a362676ed7f6533e81172945652426ea6cf2b32ae8304b3
ssdeep: 1536:ZHf7MvSDKz4GXFh9HCJ4neElMeV1UU3FMCXj9WOZ/TWSzhj0TOfO1sPgSuR:ZHfYHQJ4iICRCz9Vxk1soSuR
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 1.3.3.0
InternalName: covid-19 informer.exe
FileVersion: 1.3.3.0
CompanyName: World Health Organization
LegalTrademarks:
Comments: Agency
ProductName:
ProductVersion: 1.3.3.0
FileDescription: covid-19 informer
OriginalFilename: covid-19 informer.exe

Generic PUA BG (PUA) also known as:

MicroWorld-eScanTrojan.GenericKD.42877458
Qihoo-360Generic/Trojan.973
ALYacTrojan.Chapak.A
BitDefenderTrojan.GenericKD.42877458
BitDefenderThetaGen:NN.ZemsilF.34100.im0@aq5UOao
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R057H09CN20
Paloaltogeneric.ml
GDataTrojan.GenericKD.42877458
KasperskyHEUR:Trojan.MSIL.Chapak.gen
Ad-AwareTrojan.GenericKD.42877458
SophosGeneric PUA BG (PUA)
F-SecureTrojan.TR/Chapak.amdgw
McAfee-GW-EditionArtemis!Trojan
EmsisoftTrojan.GenericKD.42877458 (B)
APEXMalicious
WebrootW32.Trojan.Gen
AviraTR/Chapak.amdgw
Antiy-AVLTrojan/MSIL.Chapak
ArcabitTrojan.Generic.D28E4212
AegisLabTrojan.MSIL.Chapak.4!c
ZoneAlarmHEUR:Trojan.MSIL.Chapak.gen
MicrosoftTrojan:Win32/Casdet!rfn
McAfeeArtemis!9A5F2D333610
MalwarebytesTrojan.Loader
PandaTrj/GdSda.A
RisingTrojan.IPLogger!1.B69D (CLOUD)
SentinelOneDFI – Malicious PE
AVGWin32:Malware-gen
AvastWin32:DropperX-gen [Drp]
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Generic PUA BG (PUA)?

Generic PUA BG (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment