PUA.AtosevRI.S9701145 (file analysis)

The PUA.AtosevRI.S9701145 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.AtosevRI.S9701145 virus can do?

How to determine PUA.AtosevRI.S9701145?


File Info:
crc32: D8FCA944
md5: 6a6873c4198e4a849a8a7947d61b7fe8
name: upload_file
sha1: 68e965b663192611ea234caf9f779adb63b5d703
sha256: 3e735197e04e59ec496cfb39a7aa1d008cd5ab0a434a10fc36ff8253433012e2
sha512: 649004f4fc2079353aa597ea1b9f062578cff10438b14f3c68b10956bcfb9e9da652e8238ac335170e8707f79118663f4e85be6ead7c787589cf97ae2e651652
ssdeep: 3072:T7gxjmVNvK8UNiHIw7zGy3fVMzJa1KGhDVTzD49vPWO/M0l0gHYJqDKUfD:T7griHTHPKz0RTH83h/MoHt
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

PUA.AtosevRI.S9701145 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.578183
FireEye	Generic.mg.6a6873c4198e4a84
CAT-QuickHeal	PUA.AtosevRI.S9701145
ALYac	Gen:Variant.Razy.578183
Cylance	Unsafe
AegisLab	Trojan.Win32.Cometer.4!c
K7AntiVirus	Trojan ( 005106081 )
BitDefender	Gen:Variant.Razy.578183
K7GW	Trojan ( 005106081 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	Meterpreter
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.CobaltStrike-8091534-0
Kaspersky	HEUR:Trojan.Win32.Cometer.gen
Alibaba	VirTool:Win64/Atosev.3141900e
Rising	Trojan.Cometer!8.E150 (TFE:5:uzNLOvtasbV)
Ad-Aware	Gen:Variant.Razy.578183
Comodo	Malware@#3dhl5h4b2fcy9
MaxSecure	Trojan.Malware.10056239.susgen
DrWeb	BackDoor.Meterpreter.157
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-R + Mal/Swrort-Y
McAfee-GW-Edition	BehavesLike.Win64.Injector.dh
Sophos	Mal/Swrort-Y
SentinelOne	DFI – Malicious PE
Jiangmin	HackTool.Inject.bje
Avira	HEUR/AGEN.1104531
MAX	malware (ai score=87)
Microsoft	VirTool:Win64/Atosev.A
Arcabit	Trojan.Razy.D8D287
ZoneAlarm	HEUR:Trojan.Win32.Cometer.gen
GData	Gen:Variant.Razy.578183
AhnLab-V3	Trojan/Win32.Cometer.R260787
Acronis	suspicious
McAfee	CobaltStr-FDWE!6A6873C4198E
VBA32	Trojan.Cometer
ESET-NOD32	a variant of Win64/RiskWare.CobaltStrike.Beacon.A
Tencent	Malware.Win32.Gencirc.10b74e9d
Yandex	Trojan.Cometer!D2F1R+jdmBI
Ikarus	PUA.RiskWare.Cobaltstrike
eGambit	Trojan.Generic
Fortinet	W32/Meterpreter.AAE!tr
AVG	Win64:HacktoolX-gen [Trj]
Avast	Win64:HacktoolX-gen [Trj]
Qihoo-360	Win32/Trojan.44b

How to remove PUA.AtosevRI.S9701145?

PUA.AtosevRI.S9701145 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X