Categories: PUA

About “Generic PUA PA (PUA)” infection

The Generic PUA PA (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA PA (PUA) virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Generic PUA PA (PUA)?


File Info:
crc32: 67D3A0FCmd5: 183d554177537a2452e077937f0675c1name: zdrava-voda2.exesha1: f0ed81ae95de032a5db25040b716fe8b5ceec783sha256: acc8601b103c7218dbdfb7cdeb0b2d7f2accde404a6d94aec85edea08881682bsha512: 83165173743f69a776baabab3bd12f2ef9245b6943c1181b5d12e7417da813ade008cf60973ed34fc14bf84bb642828cd9ae4244057e2bd06aa698e42b297362ssdeep: 49152:RG1d4ebPMGf13UpYw81OuV7sFHYgOtEB5txgZN3Le2vA2AdvB0fjULU/Ya:ed4g5UY91VOxYgtDAZdo2AdGfj9/dtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0804 0x04b0LegalCopyright: Acme Photo SoftwareInternalName: ApssmPlayerFileVersion: 1.07CompanyName: Acme Photo SoftwareComments: To get more information please visit: http://www.acme-photo-screensaver-maker.comProductName: ApssmPlayerProductVersion: 1.07FileDescription: ApssmPlayerOriginalFilename: ApssmPlayer.scr

Generic PUA PA (PUA) also known as:

Bkav	W32.HfsOval.
McAfee	GenericRXBA-CA!183D55417753
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
F-Prot	W32/Trojan.CDUD
AegisLab	Trojan.Win32.Generic.4!c
Comodo	Malware@#3po37vpx37gw7
Zillya	Adware.LoadMoney.Win32.69913
McAfee-GW-Edition	GenericRXBA-CA!183D55417753
Sophos	Generic PUA PA (PUA)
Ikarus	Trojan-Dropper.Agent
Cyren	W32/Trojan.TVRI-0396
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	Trojan:Win32/Zpevdo.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CL319
Rising	PUA.Presenoker!8.F608 (CLOUD)
SentinelOne	DFI – Suspicious PE
Fortinet	GenericRXBA.CA!tr
CrowdStrike	win/malicious_confidence_60% (W)