Categories: PUA

PUA.KuaizipRI.S19154091 removal guide

The PUA.KuaizipRI.S19154091 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA.KuaizipRI.S19154091 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUA.KuaizipRI.S19154091?


File Info:
crc32: 3B2BD888md5: a2d8f02431e0c541d2d8020f2035dea6name: A2D8F02431E0C541D2D8020F2035DEA6.mlwsha1: 597cc07ae322f980f899a8c4f0f80a55b574602asha256: 25ad486004d9740751f48bb2692126e60df2a592f8c0d39efd2d899ce9f94099sha512: 78a6a1f1a7f5128c3b45a6e5c47c8d5111e33e996f1b36b90de6f3d38916312782f5b8251d639419f2f2957c5d9de3d1cd4f3a3a9359335c9dfb9d21e2bde8ddssdeep: 24576:OWl4rCfxwhQjWpWAcTlXkSciRn8YGR8H/V3UnV4twyPif2+j+8Re:n4upwhQjWpmUWn8YGeH1UOwyPU2+j+Ztype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2019 x4e0ax6d77x5c55x76dfx7f51x7edcx79d1x6280x6709x9650x516cx53f8 All Rights ReservedInternalName: readmode.exeFileVersion: 3.2.2.3CompanyName: x4e0ax6d77x5c55x76dfx7f51x7edcx79d1x6280x6709x9650x516cx53f8ProductName: readmode.exeProductVersion: 3.2.2.3FileDescription: readmode.exeOriginalFilename: readmode.exeTranslation: 0x0804 0x04b0

PUA.KuaizipRI.S19154091 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Adware ( 00565ab71 )
Lionic	Adware.Win32.KuziTui.2!c
Elastic	malicious (high confidence)
CAT-QuickHeal	PUA.KuaizipRI.S19154091
Cylance	Unsafe
Zillya	Adware.KuziTui.Win32.1169
Sangfor	Trojan.Win32.Save.a
Alibaba	AdWare:Win32/KuaiZip.2bbb5c89
K7GW	Adware ( 00565ab71 )
Cybereason	malicious.ae322f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/KuaiZip.AB potentially unwanted
APEX	Malicious
Avast	Win32:Sality [Inf]
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.KuziTui.gen
NANO-Antivirus	Riskware.Win32.KuziTui.ihugjj
ViRobot	Adware.Kuzitui.1568240
VIPRE	Virus.Win32.Sality.atbh (v)
TrendMicro	PE_SALITY.ER
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
FireEye	Generic.mg.a2d8f02431e0c541
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.KuziTui.tx
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.3346A16
Microsoft	Trojan:Win32/Wacatac.A!ml
Acronis	suspicious
McAfee	KuaiZip
VBA32	BScope.Adware.Burden
Malwarebytes	Adware.Kuaizip
TrendMicro-HouseCall	PE_SALITY.ER
Rising	Adware.Agent!1.C6CF (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/KuaiZip.E73E
AVG	Win32:Sality [Inf]
Paloalto	generic.ml