Generic PUA NM (PUA) removal tips

The Generic PUA NM (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Generic PUA NM (PUA) virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Creates RWX memory
• Reads data out of its own binary image
• A process created a hidden window
• The binary likely contains encrypted or compressed data.
• Executed a process and injected code into it, probably while unpacking
• Creates a hidden or system file
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Generic PUA NM (PUA)?

File Info:
crc32: 1D335E4Amd5: 346c0d5722c95ac1ab099227c70e2b9fname: 2c.jpgsha1: dc859baf9302230f7b9eedf8347ab258e0add5bfsha256: cb229ca0114835dd255b1069e9995581217ac862347fa81f8c6bd230bb3edcc2sha512: b4b9aa0ada60ff0e16ec40928827f1f9b13b4241e1902c638217dc62bed13794d06d838ce84b4062edcfe5a6c8dece2ce09debb3e7ad73fc1cd20565f34adac3ssdeep: 24576:K0XoSFVAgm6Tmhjh5PIiZzIibVAnh163BJcb:K/CVs6mjh9bVyaxKbtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
FileOldVersion: 1.0.4.4InternalName: gjdtth.exeCopyright: Copyright (C) 2020, odfgbivTranslation: 0x0841 0x04c4

Generic PUA NM (PUA) also known as:

MicroWorld-eScan	Trojan.GenericKD.32713656
McAfee	Artemis!346C0D5722C9
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Adware.Win32.SoftPulse.m2pZ
K7AntiVirus	Trojan ( 0055b0f71 )
K7GW	Trojan ( 0055b0f71 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Generic.D1F32BB8
TrendMicro	Trojan.Win32.SMOKELOAD.SMD2.hp
Cyren	W32/Trojan.NBHE-0176
ESET-NOD32	a variant of Win32/Kryptik.GYIT
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Ransom.Win32.Agent.avzi
BitDefender	Trojan.GenericKD.32713656
Rising	Trojan.Kryptik!1.BE74 (CLASSIC)
Endgame	malicious (high confidence)
Comodo	Malware@#3rlp9qyu0qu4z
DrWeb	Trojan.Encoder.858
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.346c0d5722c95ac1
Sophos	Generic PUA NM (PUA)
Ikarus	Trojan-Downloader.Win32.SmokeLoader
F-Prot	W32/Shade.AP
Jiangmin	TrojanDownloader.Bandit.avd
Fortinet	W32/Kryptik.GYIT!tr
Microsoft	Ransom:Win32/Troldesh.A
ZoneAlarm	Trojan-Ransom.Win32.Agent.avzi
AhnLab-V3	Trojan/Win32.MalPe.R299328
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.32250.av0@auwilQc
ALYac	Trojan.Ransom.Shade
MAX	malware (ai score=83)
Malwarebytes	Trojan.MalPack.GS.Generic
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.SMOKELOAD.SMD2.hp
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
GData	Trojan.GenericKD.32713656
Ad-Aware	Trojan.GenericKD.32713656
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
Qihoo-360	HEUR/QVM10.2.3799.Malware.Gen

How to remove Generic PUA NM (PUA)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.