Categories: PUA

PUA:Win32/Wews87 removal guide

The PUA:Win32/Wews87 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA:Win32/Wews87 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUA:Win32/Wews87?


File Info:
name: 8F999E60930CB97825BD.mlwpath: /opt/CAPEv2/storage/binaries/9e24a67482fdaa2846aee4e75d96e6778dff614c9db3482c733612ad630e6bd2crc32: 84D263A6md5: 8f999e60930cb97825bd13c9839f60b7sha1: af2c30edf92b2ba6732fee1c160831bfb1da1612sha256: 9e24a67482fdaa2846aee4e75d96e6778dff614c9db3482c733612ad630e6bd2sha512: d2808a62fa90b4e2d8563f59d171278ca756d85e624e35e4c52bc5774af83e953ae2520d7dd3a3cb032197cbda42886de4e01080c3a6634261c66b794347a71cssdeep: 98304:GlOntOIgoYHCNCyEwOMZdoabBre9srnao3Z2W5MsKiPcAglG9J0D5:G0M2Yc1hcW4sqWNKiPfglG9uD5type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19A3633337DA619DECCA20F736DE67502E654B3D43B1658025F499AF08BBAEB87C78011sha3_384: 6ea564202fbc61022d228d392615abc93aa559920dede76571a944ab6276ec2f1cf8fff85f3ec692e30f5f349cfd5b74ep_bytes: 81ec840100005355565733db68018000timestamp: 2016-04-02 03:20:09
Version Info:
CompanyName: 3DM游戏中心FileDescription: 裁决战歌 installFileVersion: 3.0.0.0LegalCopyright: 3DM游戏中心ProductName: 裁决战歌ProductVersion: 3.0.0.0Translation: 0x0804 0x03a8

PUA:Win32/Wews87 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Adware.Jaik.40885
FireEye	Gen:Variant.Adware.Jaik.40885
CAT-QuickHeal	PUA.IgenericRI.S27729452
McAfee	GenericRXAA-AA!75555862F3E5
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Adware.Jaik.40885
K7AntiVirus	Adware ( 004e2f011 )
K7GW	Adware ( 004e2f011 )
Arcabit	Trojan.Adware.Jaik.D9FB5
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Wews87.B potentially unwanted
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Adware.Jaik.40885
Avast	Win32:AdwareX-gen [Adw]
Emsisoft	Gen:Variant.Adware.Jaik.40885 (B)
DrWeb	Trojan.DownLoader40.40259
Ikarus	PUA.Wews87
MAX	malware (ai score=89)
Antiy-AVL	GrayWare/Win32.Wews87.b
Microsoft	PUA:Win32/Wews87
GData	Gen:Variant.Adware.Jaik.40885
ALYac	Gen:Variant.Adware.Jaik.40885
VBA32	BScope.Adware.FileFinder
Rising	PUF.Wews87!8.642 (TFE:5:bGMceaAmk9C)
Fortinet	Riskware/Wews87
AVG	Win32:AdwareX-gen [Adw]
CrowdStrike	win/grayware_confidence_100% (D)