Generic PUA KN (PUA) removal instruction

The Generic PUA KN (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA KN (PUA) virus can do?

• A process attempted to delay the analysis task.
• Reads data out of its own binary image
• Drops a binary and executes it
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Installs itself for autorun at Windows startup
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Generic PUA KN (PUA)?

File Info:
crc32: 2CEB76E4
md5: e039974311dff0028f7bb4b09f950888
name: installer_campaign_6286.exe
sha1: ec7abb2e62d044d3ff627ea9e3b2929833485992
sha256: de6b8f410fccd59aa31ea3166f4266c5ffc4a66ab7b9a1cf0dd0f639020f133f
sha512: 627c6e6d943f54dbecdd0eabe74e499728958a9eac89d35b03e754a25fd3a935a08ce27fac697e5519e23a70065a93b19041973fa17e52fab5c50932eb34d568
ssdeep: 49152:UuB7m5c+6HlnG/eYk1nJArnTltZh00C9K:Ug7mD6HlnKeYuOTlO0+K
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
InternalName: wfsmycgaodpml
OriginalFilename: idasdjsdjv
FileDescription: qjeqwweasdas
Translation: 0x0409 0x04b0

Generic PUA KN (PUA) also known as:

How to remove Generic PUA KN (PUA)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.