Generic PUA FN (PUA) removal guide

The Generic PUA FN (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA FN (PUA) virus can do?

Presents an Authenticode digital signature
Reads data out of its own binary image
Drops a binary and executes it

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic PUA FN (PUA)?


File Info:
crc32: 1D447F69
md5: b35ff79f443d9197c3c565c94a998ae3
name: winner_casino.exe
sha1: 5dc13d956f0b1ee8ad17c893920afc593ed9d0f3
sha256: 091df8b0e954d3cecb3cc9368ff210cefeb8388bd0df95d38cb53d9b40908100
sha512: bc6eed18fd8ea43eec331b3454b0c22c9067322eb3168d0ec567228a1f2f667e061bbeff0a5edfde09115db1004ca88f0726c4b61bac863bb2d41cfcf2ffcc5e
ssdeep: 24576:zt+voYju4mQq1lYlJ+mHjrTu1YIW1Urzp0b:zMuMlJ5DqA1UrW
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
LegalCopyright: Copyright 2014
ProductName: Winner Casino
FileDescription: Winner Casino Setup
FileVersion: 1.1.1.35
CompanyName: Winner Casino
Translation: 0x0409 0x0000

Generic PUA FN (PUA) also known as:

FireEye	Generic.mg.b35ff79f443d9197
McAfee	Artemis!B35FF79F443D
K7AntiVirus	Adware ( 005293511 )
K7GW	Adware ( 005293511 )
APEX	Malicious
Avast	Win32:Malware-gen
GData	Win32.Application.Agent.50UGJ9
Endgame	malicious (high confidence)
Sophos	Generic PUA FN (PUA)
F-Secure	Heuristic.HEUR/AGEN.1100488
Invincea	heuristic
McAfee-GW-Edition	Playtech
Ikarus	PUA.PlayTech
Cyren	W32/Application.TSVU-5761
Avira	HEUR/AGEN.1100488
Microsoft	PUA:Win32/Playtech
VBA32	Trojan.Crossrider
ESET-NOD32	a variant of Win32/PlayTech.A potentially unwanted
Rising	PUF.PlayTech!1.B89C (CLOUD)
Yandex	Riskware.Agent!
Fortinet	W32/Agent.4538!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Generic PUA FN (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic PUA FN (PUA) removal guide