PUA

What is “Generic PUA DC”?

Malware Removal

The Generic PUA DC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic PUA DC virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic PUA DC?


File Info:

crc32: 41AA5E37
md5: b79572868b795f0418c818cce21dcde4
name: Godus-V2.0-Trainer-1-MrAntiFun.EXE
sha1: 327c33716ceae517a28537e24c5b109f7fd5dbee
sha256: a651899243e35f5c2e8fb7ac4e8fbf609b93fe3273923e3a3b0393d701384ed7
sha512: 9770a03986ca0f74ef2022baa9a4566a320241b8f15aa7fa40d532ed201b0ad3807989b3094c9896013ea3b30eb3dcb59e49516fbf55e7ff2593fc2e087d0eff
ssdeep: 98304:ftciMyqbCBV/VgxLtlhWEgkn8PtNjU+lQNSjqvq4Z:F1UbCb6xZaWGWN4q
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic PUA DC also known as:

McAfeeArtemis!B79572868B79
MalwarebytesHacktool.CheatEngine
AgnitumHackTool.CheatEngine!h2lP7QG9eRI
SymantecTrojan.Gen.SMH
TrendMicro-HouseCallTROJ_GEN.R047H05G814
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis
SophosGeneric PUA DC
JiangminTrojanDropper.Injector.bhlg
Antiy-AVLTrojan/Win32.Tgenic
ESET-NOD32a variant of Win32/HackTool.CheatEngine.AF
Baidu-InternationalHacktool.Win32.CheatEngine.bAF

How to remove Generic PUA DC?

Generic PUA DC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment