Generic PUA KK (PUA) removal

The Generic PUA KK (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA KK (PUA) virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Attempts to modify proxy settings
Attempts to modify browser security settings

Related domains:

z.whorecord.xyz

tpop.kpzip.com

tj.kpzip.com

a.tomx.xyz

How to determine Generic PUA KK (PUA)?


File Info:
crc32: 8AF2DD28
md5: 58020b0b0e043eeb1e4cbd46f5f1c114
name: tpop4-3.exe
sha1: aa12d724ca8e1e5a17cc5afa80d97cd0243ebf5e
sha256: 794296c6176da9743fe47196de9be7db548fb25e3a9255ea0ccc8e300a9eb21a
sha512: 3176f056fdff7fcba443fa65af391b2082c9969a5ba14d1a1db1c3a7d99147c41d6b2b82ec0f4417a8253124596c7b9d036df898c6f278781e467cc1a020f96c
ssdeep: 49152:C4VEriq1XWyGqe6cb84Q3yRru+LAKbvPqM:C3rt1myIb84Q3y4A
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2019
InternalName: x5c0fx8d34x58eb
FileVersion: 3.1.0.11
ProductName: x5c0fx8d34x58eb
ProductVersion: 3.1.0.11
FileDescription: x5c0fx8d34x58eb
OriginalFilename: x5c0fx8d34x58eb
Translation: 0x0804 0x04b0

Generic PUA KK (PUA) also known as:

Bkav	W32.HfsAdware.C51A
FireEye	Generic.mg.58020b0b0e043eeb
McAfee	Artemis!58020B0B0E04
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Unwanted-Program ( 005323b41 )
K7GW	Unwanted-Program ( 005323b41 )
Invincea	heuristic
ESET-NOD32	a variant of Win32/KuaiZip.N potentially unwanted
GData	Win32.Application.Agent.1RWULO
Kaspersky	not-a-virus:HEUR:AdWare.Win32.KuaiZip.gen
Alibaba	AdWare:Win32/KuaiZip.4643499d
ViRobot	Adware.Kuaizip.1664408.B
Avast	FileRepMalware [PUP]
McAfee-GW-Edition	Artemis!PUP
Sophos	Generic PUA KK (PUA)
SentinelOne	DFI – Suspicious PE
Jiangmin	AdWare.KuaiZip.ek
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.KuaiZip.gen
Microsoft	PUA:Win32/KuaiZip
VBA32	Adware.KuaiZip
Rising	Adware.KuaiZip!1.B92F (CLASSIC)
Yandex	PUA.KuaiZip!
eGambit	Unsafe.AI_Score_98%
Fortinet	Adware/KuaiZip
MaxSecure	Trojan.Malware.73580967.susgen
AVG	FileRepMalware [PUP]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Generic PUA KK (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic PUA KK (PUA) removal