PUA

PUA.PrifouIH.S19314608 removal tips

Malware Removal

The PUA.PrifouIH.S19314608 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA.PrifouIH.S19314608 virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine PUA.PrifouIH.S19314608?


File Info:

crc32: 8F2BC36C
md5: 9c4b60aca74775fab4b56bf3f4e2d55f
name: 9C4B60ACA74775FAB4B56BF3F4E2D55F.mlw
sha1: dc02b05cf59d69b87c1fda73cd3b9fc82cf8295a
sha256: 1a34f1d0d0f68eb957d87f38e8a67fc7315756e38ee22309cc0df7fb7090bb7c
sha512: 99f81a636d868573632c8b247830781cca1d53a516f3cfcecba79fe433609b5b64a98f86c2b348cca21c415ff839889dec4e553f508211296d50680e904846b4
ssdeep: 12288:Ah6EkoFCWHOctKvARe3Q+bM4MdssR5D+RsJ:SnI+7tKv8eDQ4MWsJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 All Rights Reserved
InternalName: LokenoCoge
FileVersion: 3.8.35.78
CompanyName: Gupafeni Ltd.
LegalTrademarks:
ProductName: Dohadid Telodune
ProductVersion: 3.8.15.97
FileDescription:
OriginalFilename: LokenoCoge.exe

PUA.PrifouIH.S19314608 also known as:

BkavW32.AIDetect.malware1
LionicRiskware.Win32.Generic.1!c
Elasticmalicious (high confidence)
CAT-QuickHealPUA.PrifouIH.S19314608
McAfeePUP-XEY-VR
ZillyaTool.Bundler.Win32.5495
SangforVirus.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.f9bf9c91
K7GWAdware ( 005393151 )
K7AntiVirusAdware ( 005393151 )
CyrenW32/DealPly.U.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/DealPly.QW potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
CynetMalicious (score: 100)
Kasperskynot-a-virus:VHO:AdWare.Win32.DealPly.gen
BitDefenderAdware.DealPly.1.Gen
NANO-AntivirusRiskware.Win32.DealPly.exhqui
MicroWorld-eScanAdware.DealPly.1.Gen
TencentMalware.Win32.Gencirc.10b21b28
Ad-AwareAdware.DealPly.1.Gen
SophosDealPly Updater (PUA)
ComodoApplicUnwnt@#25mx25qn0owlg
BitDefenderThetaAI:Packer.ADB2D5BD19
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0OK121
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
FireEyeGeneric.mg.9c4b60aca74775fa
EmsisoftAdware.DealPly.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.icek
AviraADWARE/AD.DealPly.ajxmo
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.243C792
MicrosoftTrojan:Win32/Wacatac.A!ml
SUPERAntiSpywarePUP.LoadMoney/Variant
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.DealPly.gen
GDataAdware.DealPly.1.Gen
AhnLab-V3PUP/Win32.DealPly.R219471
Acronissuspicious
VBA32Adware.DealPly
MAXmalware (ai score=63)
MalwarebytesPUP.Optional.WinYahoo
PandaTrj/Genetic.gen
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexRiskware.Agent!Ad7VIu1UbSs
IkarusPUA.DealPly
FortinetRiskware/DealPly
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove PUA.PrifouIH.S19314608?

PUA.PrifouIH.S19314608 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment