Generic PUA NE (PUA) removal tips

The Generic PUA NE (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA NE (PUA) virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic PUA NE (PUA)?


File Info:
crc32: 8A1EA650
md5: 667d205e2ab6177c6c677f991d507fb0
name: upload_file
sha1: d4701dd9cf410dae37dc0328cdc4cb1a5353621b
sha256: 8333ba5146dd7f8dde824afe13e0bf988566027dbfcf239f06fd709115db68d7
sha512: 2337cfe5666d1f053a9aee2d9c5a29ffd4671c9a418d6a91eece922be3e5d482bbb1118bd9186b8d9ed84804934e9bf235f45dc460511516a7c6f0996e5b85fb
ssdeep: 12288:sOZlAvXBW34aSHxF5en1PwGP0eAMNzVn2Vd13Ude/T:dlUM4aSHTUn1PQeLNzV2H17/T
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Gladis NDOUAB'S
InternalName: 
FileVersion: 1.1.4.9
CompanyName: NDSoft Corp
LegalTrademarks: 
Comments: gndouabs@hotmail.de
ProductName: LockDisk
ProductVersion: 1.0.0.0
FileDescription: Interdire (Bloquer) un CD/DVD sur votre ordinateur
OriginalFilename: 
Translation: 0x040c 0x04e4

Generic PUA NE (PUA) also known as:

MicroWorld-eScan	Trojan.GenericKD.44055467
FireEye	Generic.mg.667d205e2ab6177c
McAfee	Artemis!667D205E2AB6
Malwarebytes	Trojan.Injector
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 00570e8d1 )
BitDefender	Trojan.GenericKD.44055467
K7GW	Trojan-Downloader ( 00570e8d1 )
Invincea	Generic PUA NE (PUA)
Cyren	W32/Trojan.OWVW-2989
Symantec	Trojan Horse
APEX	Malicious
Avast	Win32:InjectorX-gen [Trj]
Kaspersky	HEUR:HackTool.Win32.Agent.gen
Alibaba	TrojanDownloader:Win32/fekpp.92dd3061
Ad-Aware	Trojan.GenericKD.44055467
Emsisoft	Trojan.GenericKD.44055467 (B)
F-Secure	Trojan.TR/Dldr.Delf.fekpp
DrWeb	Trojan.Siggen10.36912
TrendMicro	Trojan.Win32.ZYX.USMANJD20
McAfee-GW-Edition	RDN/Generic PUP.z
Sophos	Generic PUA NE (PUA)
Jiangmin	HackTool.Agent.doh
eGambit	PE.Heur.InvalidSig
Avira	TR/Dldr.Delf.fekpp
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Woreflint.A!cl
Arcabit	Trojan.Generic.D2A03BAB
ZoneAlarm	HEUR:HackTool.Win32.Agent.gen
GData	Win32.Trojan.PSE.19AUM4N
Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKD.44055467
Panda	Trj/GdSda.A
ESET-NOD32	Win32/TrojanDownloader.Delf.DAZ
TrendMicro-HouseCall	Trojan.Win32.ZYX.USMANJD20
Rising	Downloader.Delf!8.16F (TFE:4:ZZegk5sEAeI)
Ikarus	Trojan-Spy.LokiBot
Fortinet	Riskware/Agent.DAZ!tr.dldr
Webroot	W32.Trojan.Gen
AVG	Win32:InjectorX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.fba

How to remove Generic PUA NE (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Generic PUA NE (PUA) removal tips