Categories: PUA

PUA.Generic.12215 removal

The PUA.Generic.12215 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA.Generic.12215 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUA.Generic.12215?


File Info:
crc32: 53611D61md5: 229ae8b86bce422aa9e231f11c85ffebname: xinxinmotazhongwenban.exesha1: f2edb7315dd436a1cf7349714fc57ab24e5f4326sha256: bc04dd5cd3a7bdd824bddf60bcc40fcede5823eed723c9140a57b95c40ea8ba7sha512: a091f21732bb310da1e53e94aa9aef6258680a060cbb52943d5b5e78f4bb2091caa598471428c108e9e3ab21e65bc5145a836f2fc114ee74b789bd0b019d6d97ssdeep: 98304:xxBte46FN1ZcFIksDmsMrBLTE7GRmmFRzozgVQrHhQxB2RV50dFI7Y2u6C1A:xRgFFcakS9MZo7GmmFRzozgocBe0iY2Jtype: PE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
Version Info:
LegalCopyright: (C)ProductName: FileVersion: FileDescription: Producer oylchTranslation: 0x0804 0x04e4

PUA.Generic.12215 also known as:

MicroWorld-eScan	Adware.GenericKD.4917125
FireEye	Generic.mg.229ae8b86bce422a
CAT-QuickHeal	PUA.Generic.12215
McAfee	Artemis!229AE8B86BCE
Malwarebytes	Adware.Kuaiba
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 005524301 )
BitDefender	Adware.GenericKD.4917125
K7GW	Adware ( 005524301 )
Arcabit	Adware.Generic.D4B0785
Baidu	Multi.Threats.InArchive
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/AdWare.Kuaiba.A
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Ramnit-5500
GData	Adware.GenericKD.4917125
Kaspersky	not-a-virus:AdWare.Win32.Kuaiba.agm
Alibaba	AdWare:Win32/Kuaiba.05e008fd
NANO-Antivirus	Riskware.Win32.Kuaiba.efxtnr
ViRobot	Adware.Kuaiba.6228337
Ad-Aware	Adware.GenericKD.4917125
Sophos	Generic PUA KA (PUA)
DrWeb	Trojan.DownLoader12.389
Zillya	Adware.GenericKD.Win32.4840
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.BadFile.tc
Trapmine	malicious.high.ml.score
Emsisoft	Adware.GenericKD.4917125 (B)
Ikarus	PUA.Kuaiba
Jiangmin	Adware/Agent.hxi
Webroot	W32.Malware.gen
Avira	ADWARE/Adware.Gen7
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	PUA:Win32/Bitrepeyp.C
Endgame	malicious (high confidence)
ZoneAlarm	not-a-virus:AdWare.Win32.Kuaiba.agm
ALYac	Adware.GenericKD.4917125
VBA32	AdWare.Agent
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R061C0WFF19
Tencent	Win32.Adware.Kuaiba.Hqby
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Agent.BT!tr
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.86bce4
Avast	Win32:Adware-gen [Adw]
CrowdStrike	win/malicious_confidence_60% (D)
Qihoo-360	Win32/Virus.Adware.c69