About “Generic PUA FE (PUA)” infection

The Generic PUA FE (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic PUA FE (PUA) virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Japanese
Network activity detected but not expressed in API logs

How to determine Generic PUA FE (PUA)?


File Info:
crc32: 04AC0B51
md5: 0e0bc76dd6fd1b5b79967b083cc2ef16
name: abc313.exe
sha1: 5499f4457dc5ec1226ad03dd2c4dcac1f84b57e9
sha256: 47ac2e0b4c5f54b2a0d0ebb6acd4eb3bb3e66a119209496776634c4f6b820f59
sha512: 9f420709236fffc4834dc1e0e5f64b01f2a00b517e80e3d3204d122f4559a0b28d43ffc8b70925cd3b6b573cad6aa79de5b98a78d6ac2fb74b66c4e3d06e5fe3
ssdeep: 196608:kyumBR3z1WSIvY7PErTOksml0AGWM/jX/LlJ+yUU1:kyplz1lIvSErKksmyAGWMj/TPj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: EPSFX
FileVersion: 6.22.0.0
Comments: Self Extractable Archive by EXEpress
Copyright (C) Web Technology Corp.
http://www.webtech.co.jp/
ProductVersion: 6.22.0.0
FileDescription: Self Extractable Archive
OriginalFilename: EPSFX.EXE
Translation: 0x0000 0x04b0

Generic PUA FE (PUA) also known as:

McAfee	Artemis!0E0BC76DD6FD
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
Cyren	Trojan.QNAA-8
Paloalto	generic.ml
AegisLab	Trojan.Win32.Generic.4!c
Zillya	Dropper.Daws.Win32.14130
TrendMicro	TROJ_FRS.VSNW0AL19
McAfee-GW-Edition	Artemis
Trapmine	suspicious.low.ml.score
Sophos	Generic PUA FE (PUA)
F-Prot	New or modified PP97M/Downldr
Jiangmin	AdWare.KuziTui.dd
Webroot	W32.Trojan.Gen
TrendMicro-HouseCall	TROJ_FRS.VSNW0AL19
Rising	Macro.Agent.bv (CLASSIC)
Ikarus	Trojan.O97M.Donoff
Fortinet	W32/FR.BDBDFB21!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
MaxSecure	Trojan.Malware.74713547.susgen

How to remove Generic PUA FE (PUA)?

Generic PUA FE (PUA) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X