PUA

What is “PUA.Softcnapp.S3237895”?

Malware Removal

The PUA.Softcnapp.S3237895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA.Softcnapp.S3237895 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings

Related domains:

csdw.jia-si.cn
downdcdn.jia-si.cn
www.jia-si.cn

How to determine PUA.Softcnapp.S3237895?


File Info:

crc32: 64683A9D
md5: 13bd9450c382d84e46bdecb8e00adc33
name: 13BD9450C382D84E46BDECB8E00ADC33.mlw
sha1: 74da3c49a3c9dafbf402014501b69b47861e5b9c
sha256: 1a368dbbae066894b04db7da0d3be5dae2f7ad582752a0dfa3ad5ced3fd8b885
sha512: 921c0889fbafa92cf079877d19087f3d989f6f634413eac84eaeef1d5c019763d103a32bb37186d8f2e83910dc517d1d3d35acb75d60a051eed38c0906be493c
ssdeep: 49152:0WS+55YgUv6az0BtJFqIxF6D4Lj4AITDg1xU9qP5:VS+r6/z0BtWIHYvqP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

PUA.Softcnapp.S3237895 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 00535f0d1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebAdware.Softcnapp.92
CynetMalicious (score: 100)
CAT-QuickHealPUA.Softcnapp.S3237895
CylanceUnsafe
ZillyaTool.Razy.Win32.248
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWAdware ( 00535f0d1 )
Cybereasonmalicious.0c382d
CyrenW32/S-e2d95ee6!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Softcnapp.BC potentially unwanted
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Softcnapp.fhwnsv
TencentTrojan.Win32.Generic.h
SophosGeneric ML PUA (PUA)
ComodoApplication.Win32.AdWare.Softcnapp.G@7x13gz
BitDefenderThetaGen:NN.ZexaF.34236.wAW@aiOTuPcj
McAfee-GW-EditionBehavesLike.Win32.Softcnapp.vc
FireEyeGeneric.mg.13bd9450c382d84e
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.crgol
AviraHEUR/AGEN.1142834
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2726F6A
MicrosoftTrojan:Win32/Occamy.C
AhnLab-V3Malware/Win32.Generic.C2639826
Acronissuspicious
McAfeeArtemis!13BD9450C382
MAXmalware (ai score=100)
VBA32BScope.Adware.Puwaders
MalwarebytesMachineLearning/Anomalous.100%
PandaTrj/Genetic.gen
RisingAdware.Downloader!1.BBEC (CLASSIC)
YandexTrojan.GenAsa!pIkkKQJg4T0
IkarusPUA.Softcnapp
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove PUA.Softcnapp.S3237895?

PUA.Softcnapp.S3237895 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment