Malware

About “Program.Uwasson” infection

Malware Removal

The Program.Uwasson is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Program.Uwasson virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Program.Uwasson?


File Info:

crc32: C6B741B9
md5: 3ffd3a1fee736c47cb067b35efb9f9e8
name: FSCapture.exe
sha1: f99c14cd79fc7127b6575c4b6cf48750d601679e
sha256: f32019fd002398e0cbffbd0094c86e1933ef80b5570cd202137e31710afc594e
sha512: 2b1ba191c848f37f6bf3a8f64afe381490398a933134b6ef93cd5c37f8fbd4243730c83b88c33cb8ddf57837023448a688155e40adfbe6e7f75bb76a5ad61885
ssdeep: 49152:Y0bDyfPi4GSJuiIIH/b8ScgcfziylceE08SWPmcOU7m6ZDf:HSfPTvJuoQScFGBeE08nOU7ZDf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2019 by FastStone Soft
InternalName:
FileVersion: 9.3.0.0
CompanyName: FastStone Soft
LegalTrademarks:
Comments:
ProductName: FastStone Capture
ProductVersion: 9.3
FileDescription: FastStone Capture
OriginalFilename:
Translation: 0x0004 0x03a8

Program.Uwasson also known as:

CAT-QuickHealProgram.Uwasson
McAfeeArtemis!3FFD3A1FEE73
CylanceUnsafe
SangforMalware
ESET-NOD32a variant of Win32/Packed.Asprotect.JA
AlibabaPacked:Win32/Asprotect.64ae88cf
RisingPUA.Presenoker!8.F608 (CLOUD)
ZillyaTrojan.Asprotect.Win32.4
McAfee-GW-EditionBehavesLike.Win32.BadFile.vc
FortinetW32/Generic_PUA_PJ!tr
SophosGeneric PUA PJ (PUA)
CyrenW32/Trojan.UYVL-9176
Antiy-AVLGrayWare/Win32.Presenoker
MicrosoftProgram:Win32/Uwasson.A!ml
IkarusTrojan.Win32.ASProtect

How to remove Program.Uwasson?

Program.Uwasson removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment