KillNotes (PUA) removal

The KillNotes (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What KillNotes (PUA) virus can do?

Authenticode signature is invalid

How to determine KillNotes (PUA)?


File Info:
name: F5B4A51B95B79E8222E6.mlw
path: /opt/CAPEv2/storage/binaries/1802094457fdfa3554f8305dc0f6e238c1750af786ed0f0de42511b052c20b0d
crc32: 2947F5C5
md5: f5b4a51b95b79e8222e6c8a4f97227da
sha1: fc605425a6e3122a245310265450c0077ee1918c
sha256: 1802094457fdfa3554f8305dc0f6e238c1750af786ed0f0de42511b052c20b0d
sha512: 321916460a4107c5ac6ac7f393ffb02ec7fd5d36261cade7710426dd6645d9b57651faa0d2211f23cd29ed92f01c1185bf50319ef529b84ad8e3f6fcc2b10b3f
ssdeep: 192:tfWuYfN9eUtS/UjCUatg1LTlwu8hETUbCt5zlOTHzAfi2IFBSUoCMgnSYKB8B1dQ:5WumNR9TQWTmMMD6CT68B1dL6PI00P
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DD922B5BAB85C6F2C4905F3900F76F6AAF3B4A651BA745C3C550A47D2835AC06D3C3CA
sha3_384: b8a016cbbeae7c761d7a555d5773f0feb6e333fabae29166fa759bdbad92afac74aad136773896db48cb86a8158fbc2e
ep_bytes: 64a100000000558bec6aff6800404000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

KillNotes (PUA) also known as:

Lionic	Trojan.Win32.KillNotes.4!c
Cynet	Malicious (score: 100)
Skyhigh	Tool-KillNotes
Zillya	Downloader.Patched.Win32.143
Sangfor	Trojan.Win32.Zpevdo.A
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/grayware_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Rising	Trojan.Generic@AI.90 (RDML:txhpbh/VYwuhkMCw/pygjQ)
Sophos	KillNotes (PUA)
Microsoft	Trojan:Win32/Zpevdo.A
Google	Detected
McAfee	Tool-KillNotes
Cylance	unsafe
Ikarus	Trojan.Patched
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/KillNotes
DeepInstinct	MALICIOUS

How to remove KillNotes (PUA)?

KillNotes (PUA) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X