Categories: PUA

Should I remove “PUA:Win32/Qjwmonkey”?

The PUA:Win32/Qjwmonkey is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA:Win32/Qjwmonkey virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUA:Win32/Qjwmonkey?


File Info:
crc32: 31177A7Emd5: 3ebb19dc6921bf12dbb5a5df0453f721name: E4B88BE8BDBDE599A8.exesha1: 07fc4e9db01da0184d8d3a0b024978dad6d78ad3sha256: 418bb7b823e4bfea009f09ace0ab6e7be96123e902aea8457db2af8299d8d303sha512: ee34170be47ba0c159c271061b076915f3a668fb8d2b3f7e7ef2c5c0d7bb307f93fb180a57d8293668592ded3b08666f20aa4563c83e3dc6070dd251f2f8761dssdeep: 24576:HCR0n9gECzp6gP7gIv2jmep/NYWqZyh3ClZrI+2eFhpd5NUYHu17na:HlTCnnFepFSshsxEetd5ru17atype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2018InternalName: x667ax80fdx4e0bx8f7dx5668.exeFileVersion: 4.0.0.1226ProductName: x667ax80fdx4e0bx8f7dx5668.exeProductVersion: 4.0.0.1226FileDescription: x667ax80fdx4e0bx8f7dx5668OriginalFilename: x667ax80fdx4e0bx8f7dx5668.exeTranslation: 0x0804 0x04b0

PUA:Win32/Qjwmonkey also known as:

MicroWorld-eScan	Gen:Variant.Ulise.94664
FireEye	Generic.mg.3ebb19dc6921bf12
McAfee	QJWMonkey
Malwarebytes	Adware.ChinAd
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 00510c5c1 )
BitDefender	Gen:Variant.Ulise.94664
K7GW	Adware ( 00510c5c1 )
Cybereason	malicious.c6921b
TrendMicro	TROJ_GEN.R002C0PLV19
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:AdwareX-gen [Adw]
GData	Gen:Variant.Ulise.94664
Kaspersky	not-a-virus:HEUR:Downloader.Win32.Generic
Alibaba	AdWare:Win32/Qjwmonkey.17ba2c0b
Rising	Adware.Downloader!1.B5B0 (CLASSIC)
Ad-Aware	Gen:Variant.Ulise.94664
Sophos	Generic PUA AH (PUA)
Comodo	Application.Win32.Qjwmonkey.HU@8hjovh
F-Secure	Heuristic.HEUR/AGEN.1042852
Invincea	heuristic
McAfee-GW-Edition	QJWMonkey
Emsisoft	Gen:Variant.Ulise.94664 (B)
Ikarus	PUA.Qjwmonkey
Jiangmin	Downloader.Agent.mlt
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1042852
Endgame	malicious (high confidence)
Arcabit	Trojan.Ulise.D171C8
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Generic
Microsoft	PUA:Win32/Qjwmonkey
AhnLab-V3	PUP/Win32.RL_Qjwmonkey.R287544
ALYac	Gen:Variant.Adware.Razy.251612
MAX	malware (ai score=99)
VBA32	BScope.Adware.Qjwmonkey
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Adware.Qjwmonkey.H
TrendMicro-HouseCall	TROJ_GEN.R002C0PLV19
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Qjwmonkey.KD!tr
AVG	Win32:AdwareX-gen [Adw]
Paloalto	generic.ml