Should I remove “PUA.AgentFC.S26036375”?

The PUA.AgentFC.S26036375 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.AgentFC.S26036375 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine PUA.AgentFC.S26036375?


File Info:
name: 65DDFD8582F43868E0EB.mlw
path: /opt/CAPEv2/storage/binaries/78f99f410c1962bcad109274d504465b58633e1e045041fbb9f8780159938a7d
crc32: 79154BCA
md5: 65ddfd8582f43868e0eb0c49f3ba1cc9
sha1: 62dc808aa759166086afa8b2ea8429ca1c3cad3d
sha256: 78f99f410c1962bcad109274d504465b58633e1e045041fbb9f8780159938a7d
sha512: 64d3f924c750b29df9bbe66928dd5a1c47f8ed74f7056428a79b5a5c897013ed66e010dff120a6e6826f36e479d3b5960726e72879dff445dfead30bc84cc78d
ssdeep: 384:bC+WINFYe9HUkAIzxcSofHPiyxmJ9rMIARexO+JHnlZePgsnD:G/IUtmxcSoHiQOrMI93nlZeIy
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1ACC2D69737E68922E96D0F7A4CB54754C67BF2754E360E4A23A8E28E0F473C82C45BD1
sha3_384: 74d89f57f82b5e14f758e79b1873768caa6c35e5a6dded0e8213b5cfd65218254a1dfdc23cbe4056d56aff49b3739dcf
ep_bytes: ff25002040000000000032000000f5ff
timestamp: 2074-12-29 20:18:28

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Sens_Ruby_Recoil
FileVersion: 1.0.0.0
InternalName: Sens_Ruby_Recoil.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Sens_Ruby_Recoil.exe
ProductName: Sens_Ruby_Recoil
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

PUA.AgentFC.S26036375 also known as:

MicroWorld-eScan	Trojan.GenericKD.48103278
FireEye	Trojan.GenericKD.48103278
CAT-QuickHeal	PUA.AgentFC.S26036375
McAfee	Artemis!65DDFD8582F4
Sangfor	Trojan.Win32.Sabsik.FL
BitDefender	Trojan.GenericKD.48103278
Avast	Win32:AdwareX-gen [Adw]
Ad-Aware	Trojan.GenericKD.48103278
Emsisoft	Trojan.GenericKD.48103278 (B)
MAX	malware (ai score=81)
Arcabit	Trojan.Generic.D2DDFF6E
APEX	Malicious
ALYac	Trojan.GenericKD.48103278
Fortinet	Riskware/Application
AVG	Win32:AdwareX-gen [Adw]

How to remove PUA.AgentFC.S26036375?

PUA.AgentFC.S26036375 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X