Should I remove “PUA.AdposhelPMF.S19661368”?

The PUA.AdposhelPMF.S19661368 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.AdposhelPMF.S19661368 virus can do?

Authenticode signature is invalid

How to determine PUA.AdposhelPMF.S19661368?


File Info:
name: FD94F0A5F96B7380965E.mlw
path: /opt/CAPEv2/storage/binaries/85459f6c95d1da558082221a58aa7e778fd7dc2a9830220aa0841496d2d8128f
crc32: D7F5248E
md5: fd94f0a5f96b7380965e75123fd1b597
sha1: 75c607b1aada1ff8eb2582cd8dc5e41ca7fcd909
sha256: 85459f6c95d1da558082221a58aa7e778fd7dc2a9830220aa0841496d2d8128f
sha512: c2cf06e56d6444adfeba1b7b64ee83abf5b02e762a987904b83a4be539f31d72023f929b12f62e415e789eeb7868d39ea192a5634f9c4ac708b5d5bddd97bad8
ssdeep: 6144:F4SltH/VOsjrh0A6ZUGONyLN7Di9GFKNp:NEwr65vs0cN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13F35E019B840CBB6CD3F4FB04865D9DE26BAFD050FE346AFA29572195DBC1C02E22917
sha3_384: 775f717299a289a4088e843a72fefd0719a0455b25957147c7dfff7166c6d92af5afe6631e10d9e6ab42f3d806fd0d9d
ep_bytes: e886030000e985feffff558bec56ff75
timestamp: 2018-03-25 23:24:53

Version Info:
0: [No Data]

PUA.AdposhelPMF.S19661368 also known as:

Bkav	W32.FamVT.AdsCTTc.Worm
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Adposhel.25ACROSRC
ClamAV	Win.Malware.Generickdz-6980759-0
CAT-QuickHeal	PUA.AdposhelPMF.S19661368
McAfee	GenericRXFG-PT!FD94F0A5F96B
Cylance	unsafe
Zillya	Adware.AdposhelGen.Win32.9
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 0052d87f1 )
Alibaba	TrojanDropper:Win32/Adposhel.acfc3417
K7GW	Adware ( 0052d87f1 )
VirIT	Adware.Win32.ApoShel.M
Cyren	W32/S-eb2065bf!Eldorado
Symantec	PUA.Downloader
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Dropper.Win32.Agent.bjuwvk
SUPERAntiSpyware	Adware.AdPoshel/Variant
Avast	Win32:Adposhel-C [Adw]
Tencent	Trojan-Dropper.Win32.Agent.wd
Sophos	Adposhel (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Ikarus	PUA.Adposhel
GData	Win32.Trojan.PSE1.MNLZ1H
Jiangmin	TrojanDropper.Agent.dgmv
Antiy-AVL	GrayWare[Adware]/Win32.Adposhel.AY
Xcitium	Application.Win32.Adware.Adposhel.AY@7lnbtm
ZoneAlarm	Trojan-Dropper.Win32.Agent.bjuwvk
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.R224787
Acronis	suspicious
TACHYON	Adware/W32.Adposhel
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Rising	Adware.Adposhel!1.B180 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Agent.BJUWVK
Fortinet	Riskware/Adposhel
AVG	Win32:Adposhel-C [Adw]
DeepInstinct	MALICIOUS

How to remove PUA.AdposhelPMF.S19661368?

PUA.AdposhelPMF.S19661368 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X