Categories: PUA

PUA.Oooitservi.Gen removal

The PUA.Oooitservi.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA.Oooitservi.Gen virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process attempted to delay the analysis task.
Unconventionial language used in binary resources: Russian
Attempts to remove evidence of file being downloaded from the Internet
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

forces.procoldpro.ru

How to determine PUA.Oooitservi.Gen?


File Info:
crc32: 0E944F44md5: be104691c9e50a319cf8550a35dbde1aname: BE104691C9E50A319CF8550A35DBDE1A.mlwsha1: fc4c06d26f25d0596710aa8ea59ec08db76d39f0sha256: 800f8e14d8c3a0c3333789b9d0710c5550b28603fc2b598624d1240aadd43d67sha512: 4ed2c5859deb08d87484479cedeb68e0869c68a356cec7d3d21f30faa61c247d5e67ece1a4e4e074555dfad1c5b0c5a1d72925247a7639d87f8f913085d73314ssdeep: 12288:QNfTpzJdai/Bout92BJAbThbVnns0r7d:QNLBnai/BouDbns0rtype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
0: [No Data]

PUA.Oooitservi.Gen also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.LoadMoney.451
MicroWorld-eScan	Gen:Variant.Razy.787373
FireEye	Generic.mg.be104691c9e50a31
CAT-QuickHeal	PUA.Oooitservi.Gen
McAfee	LoadMoney
Cylance	Unsafe
Zillya	Adware.1ClickDownloadCRT.Win32.966
K7AntiVirus	Unwanted-Program ( 0040f9cf1 )
K7GW	Adware ( 004b31441 )
Cybereason	malicious.1c9e50
Arcabit	Trojan.Razy.DC03AD
Invincea	Generic PUA PM (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34634.LmX@aGITfkck
Cyren	W32/Ogimant.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	not-a-virus:Downloader.Win32.LMN.agj
BitDefender	Gen:Variant.Razy.787373
NANO-Antivirus	Trojan.Win32.LMN.dllcic
Ad-Aware	Gen:Variant.Razy.787373
Emsisoft	Application.InstallMon (A)
Comodo	Application.Win32.LoadMoney.AFF@5j5nvj
F-Secure	PotentialRisk.PUA/LoadMoney.qoabn
Baidu	Win32.Adware.Kryptik.e
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R06EC0PKI20
McAfee-GW-Edition	LoadMoney
Sophos	Generic PUA PM (PUA)
Ikarus	Virus.Win32.Cryptor
Jiangmin	TrojanDropper.Agent.brlc
Webroot	W32.Adware.Gen
Avira	PUA/LoadMoney.qoabn
Antiy-AVL	Trojan[Downloader:not-a-virus]/Win32.LMN.agj
Gridinsoft	Trojan.LoadMoney.sd!c
Microsoft	SoftwareBundler:Win32/Ogimant
ZoneAlarm	not-a-virus:Downloader.Win32.LMN.agj
GData	Gen:Variant.Razy.787373
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Ogimant.R149213
Acronis	suspicious
VBA32	SScope.Downware.LMN
ALYac	Gen:Variant.Razy.787373
MAX	malware (ai score=85)
Malwarebytes	PUP.Optional.LoadMoney
ESET-NOD32	a variant of Win32/Adware.LoadMoney.AFA
TrendMicro-HouseCall	TROJ_GEN.R06EC0PKI20
Rising	Malware.Undefined!8.C (TFE:1:0uOwrsNHBYU)
Yandex	PUA.Downloader!NNJ9Wigje8s
SentinelOne	Static AI – Malicious PE
eGambit	PE.Heur.InvalidSig
Fortinet	Adware/LoadMoney
AVG	Win32:AdwareSig [Adw]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM19.1.5DB7.Malware.Gen