PUA

Generic PUA JA (PUA) information

Malware Removal

The Generic PUA JA (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic PUA JA (PUA) virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic PUA JA (PUA)?


File Info:

crc32: 1DF1D8E0
md5: ebf8a99f1310f0e06a9e928f757440bd
name: setup_smkt005.exe
sha1: 9073e2dab66a3f18eea073d2176990079ccc3b1c
sha256: b8539ac62a132eb0f4accfe6f6eea585c5aef1598ec34f218baa3c999e39451f
sha512: 0c7a51c20da2456240820e7b22dbb32bd19e03b91ff6099b1f142942247d9baca234a2bc127ed4832867c7f6a195023cf68410a4138995c2f63ed8a9ab9005df
ssdeep: 98304:cCp96HDjoEudKmp+7K6oTl+Qs2XFz7tUvl2wyjTsE+r7tQQXMk12wbAOwyH3Rnz7:pp96j37H4wLyjIHHtQQ8QdwyBnZlf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2020 x6b66x6c49x82cdx7259x7f51x7edcx79d1x6280x6709x9650x516cx53f8
InternalName: x6c34x58a8x770bx56fe
FileVersion: 1.0.3.200316
CompanyName: x6b66x6c49x82cdx7259x7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: x6c34x58a8x770bx56fe
ProductVersion: 1,0,3,200316
FileDescription: x6c34x58a8x770bx56fe
Translation: 0x0804 0x04b0

Generic PUA JA (PUA) also known as:

MicroWorld-eScanTrojan.GenericKD.42893637
McAfeeArtemis!EBF8A99F1310
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusAdware ( 005631911 )
BitDefenderTrojan.GenericKD.42893637
K7GWAdware ( 005631911 )
TrendMicroTROJ_GEN.R002C0GCT20
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Adware-gen [Adw]
GDataTrojan.GenericKD.42893637
Kasperskynot-a-virus:HEUR:AdWare.Win32.Burden.gen
AlibabaAdWare:Win32/Softcnapp.4b59806a
RisingTrojan.Generic@ML.85 (RDML:FaLkXgZI2msdmyb7cYKRwA)
Ad-AwareTrojan.GenericKD.42893637
EmsisoftTrojan.GenericKD.42893637 (B)
F-SecureAdware.ADWARE/CouponMarvel.Gen7
McAfee-GW-EditionArtemis
SophosGeneric PUA JA (PUA)
IkarusPUA.Softcnapp
CyrenW32/Trojan.DIIT-1949
JiangminAdWare.Burden.lf
AviraADWARE/CouponMarvel.Gen7
MAXmalware (ai score=99)
ArcabitTrojan.Generic.D28E8145
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.Burden.gen
MicrosoftPUA:Win32/Vigua.A
ALYacTrojan.GenericKD.42893637
VBA32BScope.Adware.Softcnapp
MalwarebytesAdware.ChinAd
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Softcnapp.BC potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002C0GCT20
FortinetAdware/Burden
AVGWin32:Adware-gen [Adw]

How to remove Generic PUA JA (PUA)?

Generic PUA JA (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment