PUA

Should I remove “PUA:Win32/ClickMeIn”?

Malware Removal

The PUA:Win32/ClickMeIn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA:Win32/ClickMeIn virus can do?

  • Presents an Authenticode digital signature
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

www.download-servers.com

How to determine PUA:Win32/ClickMeIn?


File Info:

crc32: C12351A8
md5: 80bf4be22db0d09acdc94292550476ee
name: 80BF4BE22DB0D09ACDC94292550476EE.mlw
sha1: 8dd16269a818bc030ecf246d5d18660cacd69b01
sha256: dce8d3a64937c2fddea940d4555b832a81cf54d51eb945e1dfe922b459e90c59
sha512: c02a070fa64e4e02106fd7178e5d037c6996f31b848507c1889de2c58b61df5c29d9a76fbbbb7c6da81aa87db04bf9890ec13e7f6053e65255b46966fbc37d21
ssdeep: 3072:CS8BCfoDaXJ845EzQfTwFIqppSefg/UBim8RbqyBE/Wt58wgno8Ysynfirl:CPB6q/M7NN+XBiRGYEk+ovsqU
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: Copyright 2013
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: setup
ProductVersion: 1.0.0.0
FileDescription:
Translation: 0x0000 0x04e4

PUA:Win32/ClickMeIn also known as:

Elasticmalicious (high confidence)
DrWebAdware.Downware.7826
MicroWorld-eScanTrojan.GenericKD.45667873
FireEyeTrojan.GenericKD.45667873
CylanceUnsafe
SUPERAntiSpywarePUP.ConvertAd/Variant
SangforMalware
K7AntiVirusUnwanted-Program ( 004a9d2b1 )
AlibabaDownloader:Win32/VOPackage.866339f8
K7GWUnwanted-Program ( 004a9d2b1 )
SymantecPUA.SwVersionUpdater
APEXMalicious
AvastNSIS:ConvertAd-C [Adw]
Kasperskynot-a-virus:HEUR:Downloader.Win32.AdLoad.gen
BitDefenderTrojan.GenericKD.45667873
NANO-AntivirusRiskware.Win32.InstallCore.dwtfno
Ad-AwareTrojan.GenericKD.45667873
EmsisoftApplication.InstallCore (A)
Comodofls.noname@0
F-SecureProgram.APPL/Downloader.Gen
McAfee-GW-EditionArtemis!Trojan
SophosAnyProtect (PUA)
GDataTrojan.GenericKD.45667873
AviraAPPL/Downloader.Gen
MAXmalware (ai score=85)
Antiy-AVLGrayWare[Downloader]/Win32.Adload.gen
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Generic.D2B8D621
ViRobotAdware.Vopackage.206408.CZ
ZoneAlarmnot-a-virus:HEUR:Downloader.Win32.AdLoad.gen
MicrosoftPUA:Win32/ClickMeIn
CynetMalicious (score: 90)
McAfeeArtemis!80BF4BE22DB0
MalwarebytesMalware.AI.2516654375
ESET-NOD32Win32/VOPackage.D potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002H07B221
MaxSecureAdware.not-a-virus.WIN32.AdWare.DealPly.gen_189187
AVGNSIS:ConvertAd-C [Adw]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Adware.AdLoad.HyoDBh8A

How to remove PUA:Win32/ClickMeIn?

PUA:Win32/ClickMeIn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment