PUA

What is “Generic PUA OL (PUA)”?

Malware Removal

The Generic PUA OL (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic PUA OL (PUA) virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Generic PUA OL (PUA)?


File Info:

crc32: DA4CF05E
md5: b68944ce37d3477fa359727e69992aaf
name: share_01.exe
sha1: eb24f4787d4f790c25fa9f37cf1427079c25541f
sha256: c090cc47d786ae8246ad426039c0b808f68dd1521dbdabf30b89d8c333f52760
sha512: 1fa6ceea3c74b6d3e3b5ed8bd94e934360b7af7d3d92a792410d821082a6be4f9ca831e34494d931ae08cb2077232342e279e116cf619c4ecbc0b9f11e86da61
ssdeep: 24576:NZICzJXjwSem/qTtTubaTPCKQfsXbGKTTonsP2xmgiAswDiLx:NWC1zwSr6t6baTatUa6ksP2xlzsAiLx
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright (C) 2020 x4e0ax6d77x840cx683cx7535x5b50x5546x52a1x6709x9650x516cx53f8
InternalName: news.exe
FileVersion: 1.0.0.1
CompanyName: x4e0ax6d77x840cx683cx7535x5b50x5546x52a1x6709x9650x516cx53f8
ProductName: x9177x96f7x538bx7f29
ProductVersion: 1.0.0.1
FileDescription: x8ff7x4f60x65b0x95fb
OriginalFilename: news.exe
Translation: 0x0804 0x04b0

Generic PUA OL (PUA) also known as:

McAfeeArtemis!B68944CE37D3
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
Kasperskynot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
AlibabaAdWare:Win32/ComponentBased.fc2a47f4
RisingPUA.CoinMiner!8.4639 (CLOUD)
SophosGeneric PUA OL (PUA)
F-SecureHeuristic.HEUR/AGEN.1038693
McAfee-GW-EditionGenericRXHW-AL!CE0CA6B5E5E1
JiangminAdWare.ComponentBased.aa
AviraHEUR/AGEN.1038693
Endgamemalicious (moderate confidence)
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
MicrosoftPUA:Win32/CoinMiner
AhnLab-V3PUP/Win32.AdLoad.C3923949
VBA32BScope.Adware.ComponentBased
FortinetW32/GenericRXHW.AL!tr
WebrootW32.Adware.Gen
AVGWin32:TrojanX-gen [Trj]

How to remove Generic PUA OL (PUA)?

Generic PUA OL (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment