PUA.KuaizipRI.S19154091 removal guide

The PUA.KuaizipRI.S19154091 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA.KuaizipRI.S19154091 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUA.KuaizipRI.S19154091?


File Info:
crc32: 3B2BD888
md5: a2d8f02431e0c541d2d8020f2035dea6
name: A2D8F02431E0C541D2D8020F2035DEA6.mlw
sha1: 597cc07ae322f980f899a8c4f0f80a55b574602a
sha256: 25ad486004d9740751f48bb2692126e60df2a592f8c0d39efd2d899ce9f94099
sha512: 78a6a1f1a7f5128c3b45a6e5c47c8d5111e33e996f1b36b90de6f3d38916312782f5b8251d639419f2f2957c5d9de3d1cd4f3a3a9359335c9dfb9d21e2bde8dd
ssdeep: 24576:OWl4rCfxwhQjWpWAcTlXkSciRn8YGR8H/V3UnV4twyPif2+j+8Re:n4upwhQjWpmUWn8YGeH1UOwyPU2+j+Z
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2019 x4e0ax6d77x5c55x76dfx7f51x7edcx79d1x6280x6709x9650x516cx53f8 All Rights Reserved
InternalName: readmode.exe
FileVersion: 3.2.2.3
CompanyName: x4e0ax6d77x5c55x76dfx7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductName: readmode.exe
ProductVersion: 3.2.2.3
FileDescription: readmode.exe
OriginalFilename: readmode.exe
Translation: 0x0804 0x04b0

PUA.KuaizipRI.S19154091 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Adware ( 00565ab71 )
Lionic	Adware.Win32.KuziTui.2!c
Elastic	malicious (high confidence)
CAT-QuickHeal	PUA.KuaizipRI.S19154091
Cylance	Unsafe
Zillya	Adware.KuziTui.Win32.1169
Sangfor	Trojan.Win32.Save.a
Alibaba	AdWare:Win32/KuaiZip.2bbb5c89
K7GW	Adware ( 00565ab71 )
Cybereason	malicious.ae322f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/KuaiZip.AB potentially unwanted
APEX	Malicious
Avast	Win32:Sality [Inf]
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.KuziTui.gen
NANO-Antivirus	Riskware.Win32.KuziTui.ihugjj
ViRobot	Adware.Kuzitui.1568240
VIPRE	Virus.Win32.Sality.atbh (v)
TrendMicro	PE_SALITY.ER
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
FireEye	Generic.mg.a2d8f02431e0c541
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.KuziTui.tx
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.3346A16
Microsoft	Trojan:Win32/Wacatac.A!ml
Acronis	suspicious
McAfee	KuaiZip
VBA32	BScope.Adware.Burden
Malwarebytes	Adware.Kuaizip
TrendMicro-HouseCall	PE_SALITY.ER
Rising	Adware.Agent!1.C6CF (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/KuaiZip.E73E
AVG	Win32:Sality [Inf]
Paloalto	generic.ml

How to remove PUA.KuaizipRI.S19154091?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

PUA.KuaizipRI.S19154091 removal guide