What is “PUA.RiskwareVMF.S21462830”?

The PUA.RiskwareVMF.S21462830 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.RiskwareVMF.S21462830 virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine PUA.RiskwareVMF.S21462830?


File Info:
name: 24774EAB5B7A747F4C45.mlw
path: /opt/CAPEv2/storage/binaries/e36fb0fbbef6cc338476b501ca765cc85ef3a64fb7ed4d41228307dcbe8f3862
crc32: F46038AA
md5: 24774eab5b7a747f4c450d049022dd03
sha1: b2913a4a1cb5bbf116a58ddef6ee3ced409b1641
sha256: e36fb0fbbef6cc338476b501ca765cc85ef3a64fb7ed4d41228307dcbe8f3862
sha512: 845f54fc7092961c4d239e727975f002a1e8130f3b91226d992de6dbfb2b4ea20146d923dccbf009adac92418419c69edd5c926bd654fc8556cc397221e3c9ba
ssdeep: 24576:gXqjjMJqMJ9MJKMJcMJiYsKtulK7DugRoN332yvLhO:gojMJqMJ9MJKMJcMJiYsKtulK7DugiNE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EA65E62BB3D2F61BC25181B12B2546F816E6BE3419A59807E7403F4E67B7EEB4034717
sha3_384: b565092597448ca1d373d93920c9d0c8f9f36367e9897af7136cf347798b8da06da059967178ee0099e737c51d80fc22
ep_bytes: 68d8c64100e8eeffffff000048000000
timestamp: 2011-12-02 16:02:38

Version Info:
Translation: 0x0409 0x04b0
ProductName: ezleecher
FileVersion: 3.00.0002
ProductVersion: 3.00.0002
InternalName: EZLeecher V3.0.2d
OriginalFilename: EZLeecher V3.0.2d.exe

PUA.RiskwareVMF.S21462830 also known as:

CAT-QuickHeal	PUA.RiskwareVMF.S21462830
McAfee	Artemis!24774EAB5B7A
Cylance	unsafe
Sangfor	PUP.Win32.Agent.Vdct
Avast	Win32:Dropper-gen [Drp]
McAfee-GW-Edition	BehavesLike.Win32.BadFile.tm
Webroot	W32.Malware.Heur
Microsoft	PUA:Win32/Presenoker
Google	Detected
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Yandex	Trojan.Graftor!L/hbPPL/vlg
Ikarus	Trojan.Graftor
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Dropper-gen [Drp]
DeepInstinct	MALICIOUS

How to remove PUA.RiskwareVMF.S21462830?

PUA.RiskwareVMF.S21462830 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X