PUP.Optional.DownWare.RU removal

The PUP.Optional.DownWare.RU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.DownWare.RU virus can do?

Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs

How to determine PUP.Optional.DownWare.RU?


File Info:
crc32: AB172B33
md5: 52cdbcd8c1494fc0ee02cbc9493a43bb
name: 52CDBCD8C1494FC0EE02CBC9493A43BB.mlw
sha1: 1e8abdb360bda757f8c1ab3524a112f2a74238ae
sha256: 5b52b5c3169b748a221791f385d3d43b2b1d0fec355c8227a81f4cf91ec51ac3
sha512: 6c9837c7a264fb0acd906a702ed416fc5e3cda4f633d03555a220236a92054fcd985c0cc466d920fd5014c7fed3bf55b488a8bcb62318aad9a10f143ed60ec22
ssdeep: 6144:bxQgl6525Of6IfyZJSC2fgi3CCd31gLqm8AK:L5OocBpgL6V
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright c 2005 - 2012
InternalName: Downloader
FileVersion: 1, 0, 0, 0
ProductName: Downloader
ProductVersion: 1, 0, 0, 0
FileDescription: Downloader
OriginalFilename: Downloader.exe
Translation: 0x0419 0x04e3

PUP.Optional.DownWare.RU also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen5.12437
MicroWorld-eScan	Gen:Variant.Application.Downloader.156
Qihoo-360	Win32/Application.Downloader.63c
ALYac	Gen:Variant.Application.Downloader.156
Cylance	Unsafe
VIPRE	Trojan.Win32.Dwnldr.y (v)
K7AntiVirus	Adware ( 004ed1fd1 )
BitDefender	Gen:Variant.Application.Downloader.156
K7GW	Adware ( 004ed1fd1 )
Cybereason	malicious.8c1494
BitDefenderTheta	AI:Packer.4F09801B1F
Cyren	W32/GenTroj.BH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Downloader-SJK [PUP]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.LMN.gen
Alibaba	AdWare:Win32/LoadMoney.66f72de2
NANO-Antivirus	Trojan.Win32.LMN.ephumf
Rising	Trojan.Ransom-Tesla!1.A322 (CLASSIC)
Ad-Aware	Gen:Variant.Application.Downloader.156
Emsisoft	Gen:Variant.Application.Downloader.156 (B)
Comodo	Malware@#2pep0jgj6evhh
F-Secure	Program.APPL/LoadMoney.7009
Baidu	Win32.Adware.Generic.ar
McAfee-GW-Edition	BehavesLike.Win32.PUPXFF.ft
FireEye	Generic.mg.52cdbcd8c1494fc0
Sophos	Generic PUA BO (PUA)
Ikarus	Trojan.SuspectCRC
Avira	APPL/LoadMoney.7009
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Trojan.Application.Downloader.156
SUPERAntiSpyware	PUP.DownWare/Variant
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.LMN.gen
GData	Win32.Riskware.StartPage.J
Cynet	Malicious (score: 90)
Acronis	suspicious
McAfee	PUP-FFK
MAX	malware (ai score=99)
VBA32	BScope.Downware.LMN
Malwarebytes	PUP.Optional.DownWare.RU
Panda	Generic Suspicious
ESET-NOD32	a variant of Win32/LoadMoney.A potentially unwanted
Tencent	Adware.Win32.DL.Lmn.b
Yandex	Trojan.GenAsa!6V58Fn+urBk
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/PUP
AVG	Win32:Downloader-SJK [PUP]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)

How to remove PUP.Optional.DownWare.RU?

PUP.Optional.DownWare.RU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X