Generic PUA FK (PUA) removal guide

The Generic PUA FK (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic PUA FK (PUA) virus can do?

Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Sniffs keystrokes
Anomalous binary characteristics

How to determine Generic PUA FK (PUA)?


File Info:
crc32: 76F5E6F9
md5: 3705f179b15b27703a68b7aefd64340f
name: 1511992629_gameawards_ru_trainer14.exe
sha1: 5aba414168ec4083457698bc662c133f657bc84f
sha256: 94d2e7796c284b1b8270110aed9dfdbd24771dedb85bfd78034baf831fdee660
sha512: c3dc2c0d84a47fe8ce43b06f27dce65f685306f776101d9b88dd48c3118df66980030c4fd7608859be385a7568d26dc498bfb36141277cfa099b5f54db4c9558
ssdeep: 98304:QfZc05ahwbiQe3GwjpnjHOAbTfSduVJUJmy0uDgTHN6i6n5OLPkbjFFMb9:wZlafP3/jpj5jcZOuD465OaXMb9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Generic PUA FK (PUA) also known as:

CAT-QuickHeal	Dropper.Jeefo.YY5
McAfee	Artemis!3705F179B15B
Cylance	Unsafe
AegisLab	Trojan.Win64.Cobalt.tpMn
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Unwanted-Program ( 004ba1a41 )
K7AntiVirus	Unwanted-Program ( 004ba1a41 )
BitDefenderTheta	Gen:NN.ZexaF.34100.@xW@aSu0k!mi
Cyren	W32/CheatEngine.C.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/HackTool.CheatEngine.AF potentially unsafe
Endgame	malicious (high confidence)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUPXAR.rc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.3705f179b15b2770
Sophos	Generic PUA FK (PUA)
F-Prot	W32/CheatEngine.C.gen!Eldorado
Jiangmin	TrojanSpy.KeyLogger.lsz
Webroot	W32.Hacktool.Gen
Fortinet	Riskware/CheatEngine
Antiy-AVL	HackTool[Hoax]/Win32.CheatEngine.a
Acronis	suspicious
MAX	malware (ai score=95)
Malwarebytes	RiskWare.CheatEngine
APEX	Malicious
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazrKqF7UZUP7N1lxG1m7dcWS)
Yandex	HackTool.CheatEngine!h2lP7QG9eRI
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
GData	Win32.Riskware.Hacktool.D
MaxSecure	Trojan.Malware.300983.susgen
Paloalto	generic.ml

How to remove Generic PUA FK (PUA)?

Generic PUA FK (PUA) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X