What is "Generic PUA HB (PUA)"?

The Generic PUA HB (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA HB (PUA) virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic PUA HB (PUA)?


File Info:
crc32: 5D08D035
md5: 3d863826352b2ce0eb6da5fc235bb2b9
name: taxassis.exe
sha1: 7150bf5e5635a22e4d3ee356b8c73b7cc275e8e8
sha256: 5093d325efe1c678afe8f7a7630498d9fd82397cc910b38e3a336286d75ca080
sha512: d687435a16ce6be05359fd84b688741da689764b3faa78d0b3d38ac3085d4d980782a2bb5a50a2d99e8d19763bd3665796aefb058fe40265ff127a578f06680d
ssdeep: 24576:XPcb/xJ2SHrdlcRVqfUjQCiAmwQrxRCb3qPkx4tH0FrhkPM2Q:Xq/xJKqMbiAzQ1kkHAh4M2Q
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2019
InternalName: taxassis.exe
FileVersion: 1.0.0.2
CompanyName: TODO: 
ProductName: TODO: 
ProductVersion: 1.0.0.2
FileDescription: taxassist
OriginalFilename: taxassis.exe
Translation: 0x0804 0x04b0

Generic PUA HB (PUA) also known as:

MicroWorld-eScan	Trojan.GenericKD.32341993
McAfee	Artemis!3D863826352B
AegisLab	Adware.Win32.Generic.2!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.32341993
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.6352b2
Arcabit	Trojan.Generic.D1ED7FE9
BitDefenderTheta	Gen:NN.ZexaF.34098.mD0@aGXI@Chj
Cyren	W32/Trojan.SKVY-3699
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
Alibaba	AdWare:Win32/Generic.ce3f6200
Tencent	Win32.Adware.Generic.Lmuw
Ad-Aware	Trojan.GenericKD.32341993
Emsisoft	Trojan.GenericKD.32341993 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Fortinet	Adware/Generic
FireEye	Trojan.GenericKD.32341993
Sophos	Generic PUA HB (PUA)
Jiangmin	AdWare.Generic.teeu
MAX	malware (ai score=87)
Antiy-AVL	GrayWare/Win32.Presenoker
Endgame	malicious (high confidence)
Microsoft	Program:Win32/Uwamson.A!ml
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
Acronis	suspicious
VBA32	BScope.TrojanDropper.Agent
ALYac	Trojan.GenericKD.32341993
Cylance	Unsafe
Panda	Trj/GdSda.A
Rising	PUA.Puamson!8.108E8 (CLOUD)
Yandex	PUA.Agent!
GData	Trojan.GenericKD.32341993
MaxSecure	Trojan.Malware.12116207.susgen
AVG	Win32:Adware-gen [Adw]
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Generic PUA HB (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Generic PUA HB (PUA)”?