Should I remove “PUA.ContebopFC.S12591832”?

The PUA.ContebopFC.S12591832 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.ContebopFC.S12591832 virus can do?

.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUA.ContebopFC.S12591832?


File Info:
name: 0F55F116BBEB2D7BEF4A.mlw
path: /opt/CAPEv2/storage/binaries/bbc327a03582d2170df983b86f59abd2f09edfb32ab30feee9abfbecb06a6498
crc32: 32B5CD6F
md5: 0f55f116bbeb2d7bef4ada72e5e2cd27
sha1: d132f6e328227de4b958e0566a5d49c72f84ec89
sha256: bbc327a03582d2170df983b86f59abd2f09edfb32ab30feee9abfbecb06a6498
sha512: 443b01778dd957cadc308f1811544d58a72380dd341b9e2bff2b622f3260de9ce40889bf5b72a3345d49af1bba953e89ba17302b606e0beb0a01c967d016872b
ssdeep: 3072:X420Xk6SxNpdyoCHsoamUSv+LHOSROcPsnbPYaLIkF01seMWhVEuWlkIBiFR5VP3:OuSv+LHRTUU1wWhVE9LiT5doa3SI
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T16F74922A7096CAB1EBE60236D2911C10CFEDF9174B54FA5F381605F8710E3EA9F2E951
sha3_384: c5799a1c1befc01ccb43c0d997d9b4deb53ee3147fb304d44876c693d021ec190157a48150909a4436197f7fe71a8a08
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2019-04-12 22:03:47

Version Info:
0: [No Data]

PUA.ContebopFC.S12591832 also known as:

CAT-QuickHeal	PUA.ContebopFC.S12591832
Cybereason	malicious.328227
McAfee-GW-Edition	Artemis!Trojan
Ikarus	PUA.GameHack
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Program:Win32/Uwamson.A!ml
McAfee	Artemis!0F55F116BBEB
SentinelOne	Static AI – Suspicious PE
CrowdStrike	win/malicious_confidence_60% (D)

How to remove PUA.ContebopFC.S12591832?

PUA.ContebopFC.S12591832 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X