Categories: PUA

How to remove “PUA.MauvaiseRI.S5257401”?

The PUA.MauvaiseRI.S5257401 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA.MauvaiseRI.S5257401 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

lip.healthcakes.men

kiss.oatmealscene.loan

How to determine PUA.MauvaiseRI.S5257401?


File Info:
crc32: 0D5926F7md5: f2b070a48d73bebcd262b9324f2e2916name: F2B070A48D73BEBCD262B9324F2E2916.mlwsha1: ac41de126f628ebf27201941e1c3aebe76688d48sha256: 1a43051bf11da1406ef47a83b8b59543e61492ed69402938b87460642619684bsha512: 61f296e286522026aebf25e78e8c9a8b4b591d3bc823220beb545b90d4ca71d5e8610604f7494f6bb8c3075daec4be5fd47d9a27af907003e641806973d74d79ssdeep: 12288:waMzsA1PWZkjaeVOvBFeTTw+dzAW8qbe3s2RqlUYM0P4VvB7udRlB:waMzsqhlO5YTHGW8qV2RxVvB7Utype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

PUA.MauvaiseRI.S5257401 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00528e801 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Vittalia.16387
Cynet	Malicious (score: 100)
CAT-QuickHeal	PUA.MauvaiseRI.S5257401
ALYac	Application.Bundler.Agent.DB
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 00528e801 )
Cybereason	malicious.48d73b
Cyren	W32/StartSurf.AE.gen!Eldorado
Symantec	Adware.IstartSurf
ESET-NOD32	a variant of Win32/Kryptik.GFAD
APEX	Malicious
Avast	Win32:StartSurf-C [Adw]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Application.Bundler.Agent.DB
NANO-Antivirus	Trojan.Win32.Vittalia.ezrsqj
MicroWorld-eScan	Application.Bundler.Agent.DB
Ad-Aware	Application.Bundler.Agent.DB
Sophos	IStartSurfInstaller (PUA)
Comodo	Application.Win32.IStartSurf.PS@8c4m91
BitDefenderTheta	Gen:NN.ZexaF.34236.SyW@aGyyJrki
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
FireEye	Generic.mg.f2b070a48d73bebc
Emsisoft	Application.Bundler.Agent.DB (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.cblnx
Avira	HEUR/AGEN.1103317
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Azorult!ml
SUPERAntiSpyware	Trojan.Agent/Generic
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Application.Bundler.Agent.DB
TACHYON	Trojan/W32.Agent.723968.BT
AhnLab-V3	PUP/Win32.BundleInstaller.R224259
Acronis	suspicious
McAfee	Packed-FCR!F2B070A48D73
MAX	malware (ai score=98)
VBA32	BScope.AdWare.StartSurf
Malwarebytes	Adware.IStartSurf
Panda	Trj/Genetic.gen
Tencent	Malware.Win32.Gencirc.10b3e1f6
Yandex	Trojan.GenAsa!So2DBn+NOoI
Ikarus	PUA.Bundler.iStartSurf
Fortinet	W32/Kryptik.FTMV!tr
AVG	Win32:StartSurf-C [Adw]
Paloalto	generic.ml