PUA

About “PUA:Win32/Unstif” infection

Malware Removal

The PUA:Win32/Unstif is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUA:Win32/Unstif virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine PUA:Win32/Unstif?


File Info:

crc32: 931F8763
md5: ddfa326cdabc84eeeedfb5d759e8ae7f
name: DDFA326CDABC84EEEEDFB5D759E8AE7F.mlw
sha1: c73908a5f3daf41528fb362b64d52445eab08887
sha256: 195c4c25f1d97cf5a6f5b60c7b28dc7bf7525437d15a2b2d1eb8079dbc20e363
sha512: 8fccf670df3a27f1e46eaf444010247bda606c09a2c9b4be4ebf58b2cd8fcbbdc2f161a68451c14a60c56510140e1e9979d1c028e6d6233404457dfee73dbbb4
ssdeep: 12288:apxyvtIGl6o7OeWRvOX8v7HOrqpMDoXWE6PUVsye2LWf+F2XO3Gqb4XkZGO:apkm8O/RZurq0Ecyslf+FOOWlLO
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

PUA:Win32/Unstif also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0055e3df1 )
DrWebTrojan.Revizer.1075
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.351443
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaTrojanDropper:Win32/Skeeyah.38321b18
K7GWTrojan ( 0055e3df1 )
Cybereasonmalicious.cdabc8
CyrenW32/S-97b7dac1!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDropper.Addrop.BA
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Malware.Agen-7649512-0
Kasperskynot-a-virus:AdWare.Win32.Linkury.h
BitDefenderGen:Variant.Zusy.351443
NANO-AntivirusTrojan.Win32.Revizer.efgymc
MicroWorld-eScanGen:Variant.Zusy.351443
TencentWin32.Trojan-downloader.Generic.Wwyc
SophosGeneric PUA MH (PUA)
ComodoApplication.Win32.Addrop.BC@6hzr00
F-SecureHeuristic.HEUR/AGEN.1135064
BitDefenderThetaGen:NN.ZexaF.34236.PuW@aqCHqEc
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0CJ221
McAfee-GW-EditionAdware-Linkury
FireEyeGeneric.mg.ddfa326cdabc84ee
EmsisoftGen:Variant.Zusy.351443 (B)
SentinelOneStatic AI – Malicious PE
JiangminWebToolbar.Generic.uj
WebrootW32.Dropper.Gen
AviraHEUR/AGEN.1112129
eGambitGeneric.Dropper
Antiy-AVLTrojan/Generic.ASMalwNS.BD9
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftPUA:Win32/Unstif
ArcabitTrojan.Zusy.D55CD3
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.Agent.gen
GDataGen:Variant.Zusy.351443
McAfeeArtemis!DDFA326CDABC
MAXmalware (ai score=100)
VBA32Trojan.Revizer
MalwarebytesPUP.Optional.Linkury.ACMB1
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0CJ221
RisingTrojan.Generic@ML.99 (RDML:VDjuwYiTj+O2lZkbLA41Dg)
FortinetW32/Generic.AC.1AD904!tr
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml

How to remove PUA:Win32/Unstif?

PUA:Win32/Unstif removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment