Categories: PUA

How to remove “Generic PUA DO (PUA)”?

The Generic PUA DO (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic PUA DO (PUA) virus can do?

  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Sniffs keystrokes
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic PUA DO (PUA)?


File Info:

crc32: D4D7A8FEmd5: b9efcbe0dfa358df2e40f076cb32b11cname: Mafia-2-Update-5-Plus-22-Trainer.EXEsha1: 3e43151d31d9e911a958a74edbbd6ffbb980162asha256: 139fd82a4b516b22f826a08d7c079ae938475c2824dbb8276d67c6513a95462dsha512: 98af4a51ad1103f2c1d7fb2e6f4067782872424322ab3741d8cb4c706f44514bd2f04aab37de13079ef6a8f5ef17cb843d4426e6a9e23d0d252c6aeb3009c1dcssdeep: 98304:9b7N6ZJYLDFj/oDOqUyfozcBdzsPEVqYON:998SVoiqpoidzrVqYONtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic PUA DO (PUA) also known as:

MicroWorld-eScan Trojan.GenericKD.41891293
CAT-QuickHeal Dropper.Jeefo.YY5
McAfee Artemis!B9EFCBE0DFA3
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
CrowdStrike win/malicious_confidence_90% (D)
BitDefender Trojan.GenericKD.41891293
K7GW Unwanted-Program ( 004ba1a41 )
K7AntiVirus Unwanted-Program ( 004ba1a41 )
Arcabit Trojan.Generic.D27F35DD
Cyren W32/CheatEngine.C.gen!Eldorado
Symantec Trojan.Gen.2
ESET-NOD32 a variant of Win32/HackTool.CheatEngine.AF potentially unsafe
Alibaba HackTool:Win32/CheatEngine.61194f48
AegisLab Trojan.Win64.Cobalt.tpMn
Ad-Aware Trojan.GenericKD.41891293
Emsisoft Trojan.GenericKD.41891293 (B)
Invincea heuristic
McAfee-GW-Edition BehavesLike.Win32.PUPXAR.rc
Trapmine malicious.high.ml.score
FireEye Generic.mg.b9efcbe0dfa358df
Sophos Generic PUA DO (PUA)
SentinelOne DFI – Malicious PE
F-Prot W32/CheatEngine.C.gen!Eldorado
Jiangmin TrojanSpy.KeyLogger.lsz
Webroot W32.Malware.Gen
MAX malware (ai score=100)
Antiy-AVL HackTool[Hoax]/Win32.CheatEngine.a
Endgame malicious (high confidence)
Microsoft Trojan:Win32/Occamy.C
Acronis suspicious
BitDefenderTheta Gen:NN.ZexaF.34082.@xW@aOV70Tki
ALYac Trojan.GenericKD.41891293
Rising Trojan.Wacatac!8.10C01 (CLOUD)
Yandex HackTool.CheatEngine!h2lP7QG9eRI
eGambit Unsafe.AI_Score_99%
GData Win32.Riskware.Hacktool.D
Paloalto generic.ml

How to remove Generic PUA DO (PUA)?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

How to remove “Malware.AI.2670838656”?

The Malware.AI.2670838656 is considered dangerous by lots of security experts. When this infection is active,…

40 mins ago

Malware.AI.3626015347 removal

The Malware.AI.3626015347 is considered dangerous by lots of security experts. When this infection is active,…

46 mins ago

Trojan.Generic.35742373 removal instruction

The Trojan.Generic.35742373 is considered dangerous by lots of security experts. When this infection is active,…

50 mins ago

How to remove “Win32.Virtob.4.Gen”?

The Win32.Virtob.4.Gen is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Application.Bundler.DomaIQ.Q (B) removal guide

The Application.Bundler.DomaIQ.Q (B) is considered dangerous by lots of security experts. When this infection is…

2 hours ago

Jatif.4890 information

The Jatif.4890 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago