Should I remove “PUA.WacapewFC.S20327372”?

The PUA.WacapewFC.S20327372 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.WacapewFC.S20327372 virus can do?

Authenticode signature is invalid

How to determine PUA.WacapewFC.S20327372?


File Info:
name: 34D980E223D417D66785.mlw
path: /opt/CAPEv2/storage/binaries/ab985f601328f07cef6d44bf2fe9785a4e38910d0315b58982fa5e791235dcad
crc32: DB871557
md5: 34d980e223d417d667857758409f833b
sha1: 4075ebde60287527f4c7946fb7b5a90310e2a2b2
sha256: ab985f601328f07cef6d44bf2fe9785a4e38910d0315b58982fa5e791235dcad
sha512: 1af86f008329a70588360f6a4088aded7f6599aa69f102d0de4858af922e7e9f68fe6906171140f5b7a0255a8b1deced6969ec0e8891028358470062566422a9
ssdeep: 3072:cG8sjMouMoYe2e2NmTipfkL01cBF47dDz9jaLlOL0WMBZXmxE9zx+N1:cfBou3YQirkLeyF47t97L0dBzzW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T167042A0133E8A366F7BF9BB5E6B58621417676563A47DB1E0D8005EF0422780DA23F7B
sha3_384: 9f50d0ff0e74dec8d9dedd0f4fb397d592e3f44c0c485430ff7401f119406a46f352046cdddbbec807ef1e827e020eae
ep_bytes: ff251cf842000000000000000000f0f7
timestamp: 2016-10-08 16:17:28

Version Info:
Translation: 0x0000 0x04b0
FileDescription: Quick
FileVersion: 1.0.0.0
InternalName: courting.exe
LegalCopyright: Copyright © 2015
OriginalFilename: courting.exe
ProductName: Quick
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

PUA.WacapewFC.S20327372 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
CAT-QuickHeal	PUA.WacapewFC.S20327372
Skyhigh	PUP-FLQ
McAfee	PUP-FLQ
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V9cu
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Msil
Google	Detected
TrendMicro-HouseCall	TROJ_GEN.R002H06J923
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_90% (W)

How to remove PUA.WacapewFC.S20327372?

PUA.WacapewFC.S20327372 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X