PUA:Win32/Ccleaner removal tips

The PUA:Win32/Ccleaner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA:Win32/Ccleaner virus can do?

Authenticode signature is invalid

How to determine PUA:Win32/Ccleaner?


File Info:
name: 47AEC527CC9608AF3DA7.mlw
path: /opt/CAPEv2/storage/binaries/376ef8b77445c064ca72594516f569004a26ddd8987e025668cd7b11ee32981c
crc32: 2D0EAAF0
md5: 47aec527cc9608af3da7aca0f5ea8aae
sha1: 55589a96c75bcc81621bf888aa5a89a756bb1a1c
sha256: 376ef8b77445c064ca72594516f569004a26ddd8987e025668cd7b11ee32981c
sha512: 51897b30659af4b3b98ed0b0099af605d70d67c06390976ff0a7f1402bf9a05af661a3d668de628586726df7f2dc53b556338ac781012164af1e0509ca066ae3
ssdeep: 3072:HV89fpiz9TTH76K7sAzxB2fE8g/RHg6rXjl95Dii6IxLnfSAJo7VfXnkkzp1yeoj:axi9nH759qc8g/1g6nBLKpXnhyt4J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A8647C1277E18475E37626324DF95339B5B9BC608B32DBCB5384EB1C9C32981893A376
sha3_384: 94b9b61d2107cce2c3d7c0ebbb648ef41978b70e22f5cff46f53987e8d10ad336fc71d578470724236a7cd730173c625
ep_bytes: 558bec6aff68681e4300683887410064
timestamp: 2003-08-08 04:29:04

Version Info:
Comments: For updates visit http://cleanup.stevengould.org/
CompanyName: Steven R. Gould
FileDescription: Removes temporary files. Frees disk space and helps protect privacy!  :-)
FileVersion: 3.1.2
InternalName: CleanUp!
LegalCopyright: Copyright 1998-2003 Steven R. Gould
LegalTrademarks: 
OriginalFilename: cleanup.exe
PrivateBuild: 
ProductName: Windows CleanUp!
ProductVersion: 3.1.2
SpecialBuild: 
Translation: 0x0409 0x04b0

PUA:Win32/Ccleaner also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Skyhigh	BehavesLike.Win32.Sality.fh
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V369
Paloalto	generic.ml
ClamAV	Win.Trojan.Generic-9917008-0
Avast	Win32:WrongInf-A [Susp]
Jiangmin	Trojan.Generic.hdvbq
Google	Detected
Kingsoft	malware.kb.a.755
Microsoft	PUA:Win32/Ccleaner
McAfee	Artemis!47AEC527CC96
VBA32	Trojan.Wacatac
Rising	Trojan.Generic@AI.100 (RDML:ZHHQuiYl0mNT2nt43m9D3Q)
Ikarus	Trojan.Patched_c
MaxSecure	Trojan.Patched
AVG	Win32:WrongInf-A [Susp]
DeepInstinct	MALICIOUS

How to remove PUA:Win32/Ccleaner?

PUA:Win32/Ccleaner removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X