Generic PUA IC (PUA) malicious file

The Generic PUA IC (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA IC (PUA) virus can do?

Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Sniffs keystrokes
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic PUA IC (PUA)?


File Info:
crc32: FE7D8E28
md5: c5a5d5c709e20de22889e771aed025b2
name: Offworld-Trading-Company-V1.19.19365-Trainer-4-MrAntiFun.EXE
sha1: 8220aad0e6caa6791e0243fd453ff247e94d2aec
sha256: 8c83ae90655985257e4532fa3d1440f18f8025d965b74fe5e3bb2134b06361ee
sha512: b778c7c480bb0d4b18a3e31cd818576d3ba936a9db0deef702ebfa1d7f909ab5a9e87c023a62dfa449d1c73cd8fbdb50b0be54ff090d386d942f9110d3642969
ssdeep: 98304:YbM/O06zT4/fqDwT7r0U7O8FucZ2NSbGudPC+qb:YbM/uzT4/KOEU6MnUQG2a+qb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Generic PUA IC (PUA) also known as:

CAT-QuickHeal	Dropper.Jeefo.YY5
Cylance	Unsafe
K7GW	Unwanted-Program ( 004ba1a41 )
K7AntiVirus	Unwanted-Program ( 004ba1a41 )
TrendMicro	TROJ_GEN.R002C0OD718
Symantec	Trojan.Gen.2
TrendMicro-HouseCall	TROJ_GEN.R002C0OD718
GData	Win32.Riskware.Hacktool.D
ViRobot	Trojan.Win32.Z.Agent.4824576.C
Sophos	Generic PUA IC (PUA)
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUPXAR.rc
Cyren	W32/Trojan.OHBI-7274
Jiangmin	TrojanDropper.Injector.aqkx
Antiy-AVL	Trojan/Script.AGeneric
Endgame	malicious (high confidence)
McAfee	PUP-XAR-GC
AVware	Trojan.Win32.Generic!BT
MAX	malware (ai score=95)
WhiteArmor	Malware.HighConfidence
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/HackTool.CheatEngine.AF potentially unsafe
Yandex	HackTool.CheatEngine!h2lP7QG9eRI
SentinelOne	static engine – malicious
Fortinet	Riskware/CheatEngine.AF
CrowdStrike	malicious_confidence_100% (D)

How to remove Generic PUA IC (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic PUA IC (PUA) malicious file