Categories: PUA

Should I remove “PUA.GcleanerPMF.S28244869”?

The PUA.GcleanerPMF.S28244869 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA.GcleanerPMF.S28244869 virus can do?

Authenticode signature is invalid
Uses Windows utilities for basic functionality
Deletes executed files from disk
Uses suspicious command line tools or Windows utilities

How to determine PUA.GcleanerPMF.S28244869?


File Info:
name: 91D4D3B89483B0C76F54.mlwpath: /opt/CAPEv2/storage/binaries/5ea91b8a5c791e1c0959746e881cd9d6f3ae3e4091b2591d0f86483ec85b9ac3crc32: 984D2BA2md5: 91d4d3b89483b0c76f5428141354e621sha1: cfb598f80e4fe5db14e40be6733e1c41b9807588sha256: 5ea91b8a5c791e1c0959746e881cd9d6f3ae3e4091b2591d0f86483ec85b9ac3sha512: 6b53b87609124cdd8c1bb96d551c3f1c416a5c67d0f77df4ed6bbe4cc982ca28140622955037a820e1dc4a03c13e4a88689a2eff937e32ed2d8a406184194d21ssdeep: 6144:FA6Gcdm9LJAAXDpsTQvzj5cGQfWo5V1w8wKAOM7hZ:S6Gcdm9LJAAXDp+QvzFlBKUZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C3348D1075A2C472E57111760978DBF5897EB8310B2196EBB3D44F7ECE302D2AA31E6Bsha3_384: 59a36620d214b34a0cd71cdecc80d7cbd7394dcbdee07fd825ea0fe026afcd2c76bfca4c6cd534ab368667c4e86c85cfep_bytes: e8bd050000e97afeffff8b4df464890dtimestamp: 2022-08-20 06:55:57
Version Info:
0: [No Data]

PUA.GcleanerPMF.S28244869 also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Trojan.Siggen17.61985
MicroWorld-eScan	Gen:Variant.Zusy.426563
FireEye	Generic.mg.91d4d3b89483b0c7
CAT-QuickHeal	PUA.GcleanerPMF.S28244869
ALYac	Gen:Variant.Zusy.426563
Cylance	Unsafe
VIPRE	Gen:Variant.Zusy.426563
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 005480a41 )
K7GW	Trojan-Downloader ( 005480a41 )
CrowdStrike	win/malicious_confidence_70% (D)
BitDefenderTheta	AI:Packer.8A2101B71F
Cyren	W32/Agent.EPA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.ELB
APEX	Malicious
Kaspersky	HEUR:Trojan-PSW.Win32.Tepfer.vho
BitDefender	Gen:Variant.Zusy.426563
NANO-Antivirus	Trojan.Win32.Tepfer.jrxfss
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Avast	Win32:DropperX-gen [Drp]
Tencent	Trojan-Downloader.Win32.GClean.ha
Ad-Aware	Gen:Variant.Zusy.426563
Emsisoft	Gen:Variant.Zusy.426563 (B)
F-Secure	Heuristic.HEUR/AGEN.1250671
Zillya	Downloader.Agent.Win32.487128
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan-Downloader.GleaDow.A
Jiangmin	TrojanDownloader.GCleaner.r
Google	Detected
Avira	HEUR/AGEN.1250671
Antiy-AVL	Trojan/Generic.ASMalwS.17F
Arcabit	Trojan.Zusy.D68243
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.Generic.C5120832
Acronis	suspicious
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=85)
VBA32	BScope.TrojanDownloader.GCleaner
Malwarebytes	Trojan.Downloader
Rising	Stealer.Tepfer!8.13357 (TFE:5:HIbdI5elbGO)
Yandex	Trojan.DL.Agent!ggfbct+hK0k
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.ELB!tr.dldr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.89483b
Panda	Trj/Genetic.gen