PUA

Generic PUA LH (PUA) malicious file

Malware Removal

The Generic PUA LH (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic PUA LH (PUA) virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it

Related domains:

stat.offerbox.io

How to determine Generic PUA LH (PUA)?


File Info:

crc32: F4E15FFF
md5: d0f3ab1612647e1156209786da0594f7
name: _______________.exe
sha1: 12c00835a00cedbae418de76189ecd1ad5c0d786
sha256: ac6b1ee93abcdfb1e9e78d34195f616f1b8aae93ebb399660195fe5e8c7f5be9
sha512: 4f73dc75e8ad5d182d5d4543768f3aedf82359f1389368e62eb5f77a355d358c1f061ddc1bfb639cafd56386b59afedb88cb18372864ebc6f8d8d8ecbdb857be
ssdeep: 196608:BvbGNWnKest3705rrDi7e69tzoMx3x+Txj5dTU4YY:BTGkKhw527dx1xUjMbY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName: Offerbox
Comments: This installation was built with Inno Setup.
ProductName: x421x442x43ex43f x413x41cx41e!
ProductVersion: 0.0.0.1
FileDescription: x421x442x43ex43f x413x41cx41e! Setup
Translation: 0x0000 0x04b0

Generic PUA LH (PUA) also known as:

FireEyeGeneric.mg.d0f3ab1612647e11
CylanceUnsafe
AegisLabRiskware.Win32.OfferInstall.1!c
SangforMalware
CrowdStrikewin/malicious_confidence_70% (D)
K7GWAdware ( 0053dc471 )
K7AntiVirusAdware ( 0053dc471 )
TrendMicroTROJ_GEN.R057C0OCT20
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/Appster.D potentially unwanted
APEXMalicious
AvastWin32:UnwantedSig [PUP]
GDataNSIS.Application.Offerbox.A
Kasperskynot-a-virus:HEUR:Downloader.Win32.OfferInstall.gen
NANO-AntivirusTrojan.Win32.Magala.flpthi
ViRobotAdware.Offerbox.7768248
RisingAdware.AppsetOffer!1.B831 (CLASSIC)
Endgamemalicious (high confidence)
SophosGeneric PUA LH (PUA)
ComodoApplication.Win32.Appster.CB@7yjsvh
F-SecureHeuristic.HEUR/AGEN.1031226
DrWebProgram.Appset.14
Invinceaheuristic
McAfee-GW-EditionArtemis!PUP
EmsisoftApplication.Agent (A)
CyrenW32/Application.JAHC-6264
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1031226
Antiy-AVLGrayWare[AdWare]/Win32.Appster.a
MicrosoftPUA:Win32/Offerbox
AhnLab-V3PUP/Win32.OfferInstaller.R249693
ZoneAlarmnot-a-virus:HEUR:Downloader.Win32.OfferInstall.gen
McAfeeArtemis!D0F3AB161264
MalwarebytesPUP.Optional.AppsetOffer
PandaPUP/Multitoolbar
TrendMicro-HouseCallTROJ_GEN.R057C0OCT20
MaxSecurenot.a.virus.Downloader.OfferInstall.GEN
FortinetRiskware/OfferInstall
AVGWin32:UnwantedSig [PUP]
Qihoo-360Win32/Virus.Downloader.b0e

How to remove Generic PUA LH (PUA)?

Generic PUA LH (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment