PUA

PUA.UnwadersRI.S5656278 removal

Malware Removal

The PUA.UnwadersRI.S5656278 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA.UnwadersRI.S5656278 virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine PUA.UnwadersRI.S5656278?


File Info:

crc32: B8E94FDF
md5: 0d40c41d725a13a8d69a4c896f69c187
name: ____________.exe
sha1: 96cc831c0da6efc31f1d30d655d59593c563af70
sha256: 31df73aeb48ae157b6efc3f6ad04e73a7d6830c5a133cae50dfd0eded3a56288
sha512: e037f625f38cecbf7de683a564f429c414849a6aa61a77f8a56e792378a87f3ed0e23195f1aa50b5fea83266636e999ff78fa299badc328f144cfaf16c8ecc89
ssdeep: 12288:2R1bUSZcbR/wJFLS9E36jSz60TiwTrxx4GUmjoaoabzukLIVHUjT:cLS9e6mz7ThTlrLVLEHUjT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)
ProductName: x6613x8bedx8a00x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: x6613x8bedx8a00x7a0bx5e8f
Translation: 0x0804 0x04b0

PUA.UnwadersRI.S5656278 also known as:

BkavW32.AIDetectVM.malware2
CAT-QuickHealPUA.UnwadersRI.S5656278
McAfeeGenericRXAA-AA!0D40C41D725A
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005246d51 )
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.d725a1
BitDefenderThetaGen:NN.ZexaF.34106.Yq0@aylKFxcb
F-ProtW32/Agent.EW.gen!Eldorado
APEXMalicious
ClamAVWin.Malware.Zusy-6840460-0
GDataWin32.Application.PUPStudio.A
RisingMalware.Heuristic!ET#99% (RDMK:cmRtazpPpRchqiOaIwUFhbo4mJyx)
Endgamemalicious (high confidence)
ComodoWorm.Win32.Dropper.RA@1qraug
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.0d40c41d725a13a8
IkarusTrojan.Win32.QQWare
CyrenW32/Agent.EW.gen!Eldorado
Antiy-AVLGrayWare/Win32.FlyStudio.a
SUPERAntiSpywareTrojan.Agent/Gen-OnlineGames
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Dropper/Win32.Agent.C656419
Acronissuspicious
MalwarebytesSpyware.OnlineGames
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/QQWare.A!tr
CrowdStrikewin/malicious_confidence_100% (D)

How to remove PUA.UnwadersRI.S5656278?

PUA.UnwadersRI.S5656278 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment