Categories: PUA

Generic PUA PI (PUA) removal instruction

The Generic PUA PI (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic PUA PI (PUA) virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Tries to suspend Cuckoo threads to prevent logging of malicious activity
Tries to unhook or modify Windows functions monitored by Cuckoo
Anomalous binary characteristics

Related domains:

update.0817znz.com

time.0817znz.com

i.0817znz.com

xzqlog.0817znz.com

How to determine Generic PUA PI (PUA)?


File Info:
crc32: 2ABBADA4md5: 61d68fc977b6b9cbf57c0963994496c1name: pdf_________601_5087_5087-115.exesha1: f879e7db62354b45e42ba0eae5dd1fe7a123b005sha256: c798a7f487e505541ec72d8e649630a436c254db80a7059938c9f3cb7aff9691sha512: 0580acbdf63d5729579c676dce05aa4d9ad16b73c1a34d19adbb7c825d63a273f340e6541263e0433bb84dbc6dad93fa82c9c0f16b02a1f445521b869009d213ssdeep: 196608:DWnTGuIX5SGVLybKho95ApIWOuxIR+zMycRafqF:iCvX0GVLmaIvuyR+AySafwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Generic PUA PI (PUA) also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Gen:Variant.Strictor.237657
FireEye	Generic.mg.61d68fc977b6b9cb
Qihoo-360	Win32/Virus.Downloader.f1b
McAfee	Artemis!61D68FC977B6
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 0054ead51 )
BitDefender	Gen:Variant.Strictor.237657
K7GW	Trojan-Downloader ( 0054ead51 )
Cybereason	malicious.b62354
BitDefenderTheta	Gen:NN.ZexaF.34090.@JW@ae2OuCjj
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H07BR20
Avast	Win32:Malware-gen
GData	Gen:Variant.Strictor.237657
Kaspersky	not-a-virus:HEUR:Downloader.Win32.Yantai.vho
Rising	Trojan.Crypto!8.364 (CLOUD)
Ad-Aware	Gen:Variant.Strictor.237657
Emsisoft	Gen:Variant.Strictor.237657 (B)
Comodo	ApplicUnwnt@#1we921z721c0u
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
SentinelOne	DFI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	Generic PUA PI (PUA)
APEX	Malicious
Cyren	W32/Trojan.GVMW-2654
Avira	TR/Crypt.ZPACK.Gen
Endgame	malicious (high confidence)
Arcabit	Trojan.Strictor.D3A059
AhnLab-V3	Malware/Win32.Generic.C3334863
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Yantai.vho
Microsoft	Trojan:Win32/Occamy.C
Acronis	suspicious
ALYac	Gen:Variant.Strictor.237657
MAX	malware (ai score=99)
Ikarus	Trojan.Crypt
eGambit	Unsafe.AI_Score_99%
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)