Should I remove “PUA.PresenokerFC.S8706340”?

The PUA.PresenokerFC.S8706340 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.PresenokerFC.S8706340 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine PUA.PresenokerFC.S8706340?


File Info:
crc32: BBC41B65
md5: f0a0ccea3660aeb593b2f6459757a736
name: CryptoLocker_Egitici_Yazilim_.net45-icin.exe
sha1: 3b1e82eb01c6a626ede045363ef29c29f719a0e4
sha256: c8147679cb4ce42f3a7ee286fab75eb98929b81dea66a238e27c0b67566a8711
sha512: 18358424ba28f99b744e1bc491cc865f94a8e5366c2a12fc97e7f7d983a11fe0a8e88c29997076571e7accc4b0fc5193b9eccb3a51426488dc6efa5242fc4c5b
ssdeep: 6144:ECSZOPfbW/YNrm8ymHfquJx1enFtsWcvrhAjDukVuD6Pz9Fwsa+SAHsJo13v:ECBPDIYhRLqMmrFwhc3VucpPh
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.0.0.0
InternalName: cl.exe
FileVersion: 1.0.0.0
ProductName: cl
ProductVersion: 1.0.0.0
FileDescription: cl
OriginalFilename: cl.exe

PUA.PresenokerFC.S8706340 also known as:

MicroWorld-eScan	Trojan.GenericKD.32544012
CAT-QuickHeal	PUA.PresenokerFC.S8706340
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.32544012
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.b01c6a
Arcabit	Trojan.Generic.D1F0950C
Invincea	heuristic
APEX	Malicious
Ad-Aware	Trojan.GenericKD.32544012
Emsisoft	Trojan.GenericKD.32544012 (B)
MaxSecure	Trojan.Malware.300983.susgen
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Trapmine	malicious.moderate.ml.score
FireEye	Trojan.GenericKD.32544012
Sophos	Mal/Ramsil-E
Webroot	W32.Trojan.Gen
MAX	malware (ai score=86)
ALYac	Trojan.GenericKD.32544012
Cylance	Unsafe
Rising	PUA.Presenoker!8.F608 (CLOUD)
GData	Trojan.GenericKD.32544012
BitDefenderTheta	Gen:NN.ZemsilF.34106.xm0@aW9gdvh
CrowdStrike	win/malicious_confidence_90% (W)

How to remove PUA.PresenokerFC.S8706340?

PUA.PresenokerFC.S8706340 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X