About “PUA.WacapewPMF.S18135454” infection

The PUA.WacapewPMF.S18135454 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA.WacapewPMF.S18135454 virus can do?

Anomalous binary characteristics

How to determine PUA.WacapewPMF.S18135454?


File Info:
crc32: F671EA4D
md5: de5804bea68d8b69b346371510a05b7b
name: DE5804BEA68D8B69B346371510A05B7B.mlw
sha1: 756ef9551b37e79116c5c3865c4d05db42022ca4
sha256: 6ef5761f688996ae56b777def335bbc57f710fb79e4f8d45a07805b824919fed
sha512: ebf9a1de31e9b0a11df2bba3a415ee288d8ed7b5a6dbccf08f39b55e70716cab3e48067e6dbe7c293fc61148fcdc079419dc3bef760890a5dfe049a6d27e0c21
ssdeep: 12288:j5SglK218UQy9HEALeB6mILMRNyUVvhX5o9H:j5TlK2pHbeB6mcMRsI5I
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) DynamoRIO developers 2003-2008
InternalName: drconfig.exe
FileVersion: 6,2,0,17252
CompanyName: DynamoRIO developers
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: DynamoRIO
SpecialBuild: 
ProductVersion: 6,2,0,17252
FileDescription: DynamoRIO configuration command-line utility
OriginalFilename: drconfig.exe
Translation: 0x0409 0x04b0

PUA.WacapewPMF.S18135454 also known as:

FireEye	Generic.mg.de5804bea68d8b69
CAT-QuickHeal	PUA.WacapewPMF.S18135454
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/Trojan.FVS.gen!Eldorado
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Triusor-6802609-0
NANO-Antivirus	Virus.Win32.Gen.ccmw
Sophos	ML/PE-A + Troj/Wonton-IZ
SentinelOne	Static AI – Suspicious PE
Ikarus	Exploit.Shell
Jiangmin	Packed.Krap.gtnb
ZoneAlarm	HEUR:Exploit.Win32.ShellCode.vho
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Malwarebytes	Nimnul.Virus.FileInfector.DDS
APEX	Malicious
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Krap.IU!tr
AVG	Win32:Malware-gen
Cybereason	malicious.51b37e
Qihoo-360	HEUR/QVM19.1.0A87.Malware.Gen

How to remove PUA.WacapewPMF.S18135454?

PUA.WacapewPMF.S18135454 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X