PUA.RiskwarePMF.S21826758 removal

The PUA.RiskwarePMF.S21826758 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.RiskwarePMF.S21826758 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine PUA.RiskwarePMF.S21826758?


File Info:
name: 745D6382C171223472F2.mlw
path: /opt/CAPEv2/storage/binaries/00669f7b7e0ed4c6c32779c2eaef8a009fcac027628f860e94dcdb269397cb40
crc32: D4176BC2
md5: 745d6382c171223472f2e7fbfc580ebf
sha1: d7c86cbe0c9b4882b6600f018b5a1244a98f0591
sha256: 00669f7b7e0ed4c6c32779c2eaef8a009fcac027628f860e94dcdb269397cb40
sha512: ad1ee80f9d45fb1823f70811a2896b08208146bf6303314e5d06e5e33cb145f9b99ca71b140128b614637a9effd5e41505644caeba03582ee2b4155c7478e43f
ssdeep: 1536:5Nem2HSDuhk6VR00Z9GGPf+JyAhNAm8d82Ym2JJba:5Nem2jm6V3Pf+JAn12JJba
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1FF439F13A6418832C23567719DBBB69D817CBB7102B2770363A94C928E785F1F9663CF
sha3_384: 5a513557ba5ad37ff2897fc009cce0ed7fb71ae21824dba7c198a8970d624cd9d08303041bf93a8b2de92703f1c567d0
ep_bytes: e887030000e97afeffff558bec56ff75
timestamp: 2016-04-24 21:40:48

Version Info:
0: [No Data]

PUA.RiskwarePMF.S21826758 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
CAT-QuickHeal	PUA.RiskwarePMF.S21826758
Malwarebytes	Floxif.Virus.FileInfector.DDS
Sangfor	Trojan.Win32.Save.a
Cyren	W32/Presenoker.L.gen!Eldorado
APEX	Malicious
Cynet	Malicious (score: 99)
Avast	Win32:Malware-gen
F-Secure	Heuristic.HEUR/AGEN.1317268
McAfee-GW-Edition	BehavesLike.Win32.Generic.qh
GData	Win32.Trojan.Agent.5BDFGR
Avira	HEUR/AGEN.1317268
Antiy-AVL	GrayWare/Win32.Generic
Xcitium	Malware@#klfueblab54l
Microsoft	PUA:Win32/Presenoker
Google	Detected
AhnLab-V3	Malware/Win32.Generic.C3122154
McAfee	Artemis!745D6382C171
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0CE523
Rising	Trojan.Generic@AI.100 (RDMK:NoIQK7LVwnAxK35jEUBl+w)
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove PUA.RiskwarePMF.S21826758?

PUA.RiskwarePMF.S21826758 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X