PUA

PUA.GenericFC.S6053911 removal tips

Malware Removal

The PUA.GenericFC.S6053911 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA.GenericFC.S6053911 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Creates a hidden or system file
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
mysqlserver.viewdns.net

How to determine PUA.GenericFC.S6053911?


File Info:

crc32: FE264BC6
md5: cf7906020570be60d886a462a0d8e92e
name: upload_file
sha1: 189956633d7c1fd3173fdee6efd65b52275ff1ff
sha256: 0991d25c00e1c20508d2dffa87c5a2d572453756dece220dd3e83db347b4f636
sha512: e549493265092b8dada98b474465a1be2e3dfe106515379925c002665b06a83e34e946bb233c569519235458f8b5a1fcaf3f21031e0e7f2db7e7243fada489fc
ssdeep: 1536:jpd5/dMn7ppvRDIz3+EuG6pkm4N0alTcpVRX3FjBqaIiD3tSYHx0dDF:Ls7/FIzOEuTpkQmTcpZjmu9SYH
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

PUA.GenericFC.S6053911 also known as:

Elasticmalicious (high confidence)
ClamAVWin.Trojan.RevengeRat-6344273-0
FireEyeGeneric.mg.cf7906020570be60
CAT-QuickHealPUA.GenericFC.S6053911
Qihoo-360HEUR/QVM03.0.D337.Malware.Gen
McAfeeReventRat!CF7906020570
CylanceUnsafe
SangforMalware
BitDefenderGen:Heur.MSIL.Krypt.12
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/Revetrat.A.gen!Eldorado
SymantecTrojan.Revetrat
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.RRAT.gen
MicroWorld-eScanGen:Heur.MSIL.Krypt.12
Ad-AwareGen:Heur.MSIL.Krypt.12
SophosMal/Revet-A
F-SecureTrojan.TR/Spy.Gen8
DrWebTrojan.DownLoader24.26533
InvinceaML/PE-A + Mal/Revet-A
McAfee-GW-EditionBehavesLike.Win32.Generic.cm
EmsisoftGen:Heur.MSIL.Krypt.12 (B)
IkarusBackdoor-Rat.Revenge
AviraTR/Spy.Gen8
MAXmalware (ai score=85)
MicrosoftBackdoor:MSIL/RevengeRat.GA!MTB
ArcabitTrojan.MSIL.Krypt.12
ZoneAlarmHEUR:Trojan.Win32.RRAT.gen
GDataGen:Heur.MSIL.Krypt.12
AhnLab-V3Trojan/Win32.RL_Generic.C3448952
BitDefenderThetaGen:NN.ZemsilF.34590.giW@aeEfLrp
MalwarebytesBackdoor.RevengeRAT.MSIL
ESET-NOD32a variant of MSIL/Agent.APN
RisingBackdoor.Revetrat!1.B8DA (CLASSIC)
SentinelOneDFI – Malicious PE
eGambitTrojan.Generic
FortinetMSIL/RevengeRat.APN!tr
AVGWin32:MalwareX-gen [Trj]
Cybereasonmalicious.20570b
AvastWin32:MalwareX-gen [Trj]

How to remove PUA.GenericFC.S6053911?

PUA.GenericFC.S6053911 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment