Categories: PUA

Generic PUA NE (PUA) removal tips

The Generic PUA NE (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA NE (PUA) virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic PUA NE (PUA)?


File Info:
crc32: 8A1EA650md5: 667d205e2ab6177c6c677f991d507fb0name: upload_filesha1: d4701dd9cf410dae37dc0328cdc4cb1a5353621bsha256: 8333ba5146dd7f8dde824afe13e0bf988566027dbfcf239f06fd709115db68d7sha512: 2337cfe5666d1f053a9aee2d9c5a29ffd4671c9a418d6a91eece922be3e5d482bbb1118bd9186b8d9ed84804934e9bf235f45dc460511516a7c6f0996e5b85fbssdeep: 12288:sOZlAvXBW34aSHxF5en1PwGP0eAMNzVn2Vd13Ude/T:dlUM4aSHTUn1PQeLNzV2H17/Ttype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Gladis NDOUAB'SInternalName: FileVersion: 1.1.4.9CompanyName: NDSoft CorpLegalTrademarks: Comments: gndouabs@hotmail.deProductName: LockDiskProductVersion: 1.0.0.0FileDescription: Interdire (Bloquer) un CD/DVD sur votre ordinateurOriginalFilename: Translation: 0x040c 0x04e4

Generic PUA NE (PUA) also known as:

MicroWorld-eScan	Trojan.GenericKD.44055467
FireEye	Generic.mg.667d205e2ab6177c
McAfee	Artemis!667D205E2AB6
Malwarebytes	Trojan.Injector
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 00570e8d1 )
BitDefender	Trojan.GenericKD.44055467
K7GW	Trojan-Downloader ( 00570e8d1 )
Invincea	Generic PUA NE (PUA)
Cyren	W32/Trojan.OWVW-2989
Symantec	Trojan Horse
APEX	Malicious
Avast	Win32:InjectorX-gen [Trj]
Kaspersky	HEUR:HackTool.Win32.Agent.gen
Alibaba	TrojanDownloader:Win32/fekpp.92dd3061
Ad-Aware	Trojan.GenericKD.44055467
Emsisoft	Trojan.GenericKD.44055467 (B)
F-Secure	Trojan.TR/Dldr.Delf.fekpp
DrWeb	Trojan.Siggen10.36912
TrendMicro	Trojan.Win32.ZYX.USMANJD20
McAfee-GW-Edition	RDN/Generic PUP.z
Sophos	Generic PUA NE (PUA)
Jiangmin	HackTool.Agent.doh
eGambit	PE.Heur.InvalidSig
Avira	TR/Dldr.Delf.fekpp
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Woreflint.A!cl
Arcabit	Trojan.Generic.D2A03BAB
ZoneAlarm	HEUR:HackTool.Win32.Agent.gen
GData	Win32.Trojan.PSE.19AUM4N
Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKD.44055467
Panda	Trj/GdSda.A
ESET-NOD32	Win32/TrojanDownloader.Delf.DAZ
TrendMicro-HouseCall	Trojan.Win32.ZYX.USMANJD20
Rising	Downloader.Delf!8.16F (TFE:4:ZZegk5sEAeI)
Ikarus	Trojan-Spy.LokiBot
Fortinet	Riskware/Agent.DAZ!tr.dldr
Webroot	W32.Trojan.Gen
AVG	Win32:InjectorX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.fba