PUA:Win32/Zaxar removal instruction

The PUA:Win32/Zaxar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUA:Win32/Zaxar virus can do?

Presents an Authenticode digital signature

How to determine PUA:Win32/Zaxar?


File Info:
crc32: 26704208
md5: e077fe3dba8b47e43fae28ae435cc8a8
name: zaxarsteam.exe
sha1: 64ac9d1caf0d16a32bcc162dc06792d2b5a78e9d
sha256: bbc780cda2d2aa4a880a93f72533d4ba7e46eca72f0c1a4e4dcea98b57d2635b
sha512: 2da15df50ebc06b3eac26fd6add921c3b1501353ae2feb109eb18971db2ece6f920b99a21a5949b7f6aced37799f3a5936e1ecc2e3dcefe4793653474e31a7fe
ssdeep: 49152:fSwuX5hd3cexTCxGQWPcsxNoYYnfi/jveZtoawoluS0kAe:awYxTCx3Ucjn/
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: zaxarsteam.exe
FileVersion: 81.2.3+g1606b8e+chromium-81.0.4044.34
ProductName: zaxarsteam.exe
ProductVersion: 81.2.3+g1606b8e+chromium-81.0.4044.34
FileDescription: zaxarsteam
OriginalFilename: zaxarsteam.exe
Translation: 0x0409 0x04b0

PUA:Win32/Zaxar also known as:

MicroWorld-eScan	Gen:Variant.Razy.653256
Qihoo-360	Win32/Virus.Adware.461
McAfee	Artemis!E077FE3DBA8B
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Razy.653256
K7GW	Riskware ( 0040eff71 )
GData	Gen:Variant.Razy.653256
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Zaxar.gen
Alibaba	AdWare:Win32/Zaxar.28389e6d
AegisLab	Adware.Win32.Zaxar.2!c
Sophos	Generic PUA GE (PUA)
Comodo	ApplicUnwnt@#q4r8kuef7vno
F-Secure	Adware.ADWARE/Zaxar.hpdmh
DrWeb	Adware.Zaxar.106
McAfee-GW-Edition	Artemis!PUP
Emsisoft	Gen:Variant.Razy.653256 (B)
Ikarus	Trojan-Banker.TrickBot
Cyren	W64/Application.YDIJ-5688
Jiangmin	AdWare.Zaxar.ai
Avira	ADWARE/Zaxar.hpdmh
MAX	malware (ai score=88)
Antiy-AVL	GrayWare[AdWare]/Win32.Zaxar
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Zaxar.gen
Microsoft	PUA:Win32/Zaxar
Malwarebytes	PUP.Optional.Zaxar
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CE420
Rising	PUA.Zaxar!8.F65B (TFE:dGZlOgVNPH4umBFipg)
Yandex	PUA.Zaxar!
eGambit	PUP.Optional.ZarzarGames
Fortinet	Adware/Zaxar
Paloalto	generic.ml
MaxSecure	Trojan.Malware.74016309.susgen

How to remove PUA:Win32/Zaxar?

PUA:Win32/Zaxar removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X