Categories: PUA

About “Generic PUA EH (PUA)” infection

The Generic PUA EH (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA EH (PUA) virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

tjv1.wn51.com

How to determine Generic PUA EH (PUA)?


File Info:
crc32: 015C3DEBmd5: 664c1be867b43a9bb30011b7e955971bname: setup_wnyskb017.exesha1: 47cd656239104f4a240f8fb2c554c2d63042bee2sha256: 4300cc47451181b3a65b8f458e167dcac7cb6ec678ec6291441df577a7c204ddsha512: afed3b526e3d308faeb96d01df0c51d669570a24bbb15eff16f6afa9b51602768aa76828806afa197ffc3d5bd2365913cc72c5a73aa905c76e11899b7853bf01ssdeep: 196608:xlUY5OnwTYDtuyU3BbTPAutlgcB5AqGVR9aM2V9ia5:LU/vDtuF31TfEXJ9af+otype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2019InternalName: x4e07x80fdx538bx7f29FileVersion: 1.4.2.19924CompanyName: x4e07x80fdx538bx7f29ProductName: x4e07x80fdx538bx7f29ProductVersion: 1,4,2,19924FileDescription: x4e07x80fdx538bx7f29OriginalFilename: Install.exeTranslation: 0x0804 0x04b0

Generic PUA EH (PUA) also known as:

Bkav	W32.HfsAdware.DA20
DrWeb	Adware.Softcnapp.80
MicroWorld-eScan	Trojan.GenericKD.42814722
FireEye	Generic.mg.664c1be867b43a9b
CAT-QuickHeal	Trojan.GenericRI.S11519324
McAfee	GenericRXAA-AA!664C1BE867B4
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Adware ( 004d9e2c1 )
BitDefender	Trojan.GenericKD.42814722
K7GW	Adware ( 004d9e2c1 )
Cyren	W32/Application.DKJL-4798
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
GData	Trojan.GenericKD.42814722
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Burden.gen
Alibaba	AdWare:Win32/Softcnapp.50a18a4c
NANO-Antivirus	Riskware.Win32.Softcnapp.gzvpfa
ViRobot	Adware.Softcnapp.9745520
Rising	Adware.Softcnapp!1.B5FE (CLASSIC)
Ad-Aware	Trojan.GenericKD.42814722
Sophos	Generic PUA EH (PUA)
F-Secure	PotentialRisk.PUA/Softcnapp.Gen
Zillya	Adware.Burden.Win32.215
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Emsisoft	Trojan.GenericKD.42814722 (B)
Ikarus	PUA.Softcnapp
Jiangmin	AdWare.Burden.cl
MaxSecure	Trojan.Malware.74168012.susgen
Avira	PUA/Softcnapp.Gen
MAX	malware (ai score=99)
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D28D4D02
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Burden.gen
Microsoft	PUA:Win32/Softcnapp
AhnLab-V3	PUP/Win32.Softcnapp.R275230
VBA32	BScope.Adware.Softcnapp
ALYac	Trojan.GenericKD.42814722
Malwarebytes	Adware.ChinAd
ESET-NOD32	a variant of Win32/Softcnapp.J potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002H0CKO19
Tencent	Malware.Win32.Gencirc.10b0a7e3
Yandex	PUA.Burden!
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	Adware/Burden
Webroot	W32.Adware.Gen
AVG	Win32:Adware-gen [Adw]
CrowdStrike	win/malicious_confidence_100% (D)