PUP.Optional.DownWare removal instruction

The PUP.Optional.DownWare is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.DownWare virus can do?

Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUP.Optional.DownWare?


File Info:
crc32: 19B61339
md5: da1b5ea0f04cabf3ed5d68ca6da50354
name: kat-mp3-recorder-setup-free.exe
sha1: 007da68ddb25a0dc16f5b9926a020b677913670a
sha256: 7590d3d413de2ba9a027ef61fdbc6de73a0d5fef71c2ba399fba37a01c9613ef
sha512: 03a5a046bb34a33a96a433540cf82c111d74cb04cfa7730a7a8037a0b7b0aa72c177038e363a3e6b49586cf606fc04ad996a42158c52ec8d3054e8396e600b97
ssdeep: 196608:HPN6Gif26Z5Ayrb9TTg7RP6kN+dnQqUhdawVOi:H1kbAyr5qt6kuf8n
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xfffd GoodKatShare LLC
ProductName: Kat MP3 Recorder
FileDescription: Kat MP3 Recorder
FileVersion: 5.9.0.0
CompanyName: GoodKatShare LLC
Translation: 0x0409 0x0000

PUP.Optional.DownWare also known as:

Malwarebytes	PUP.Optional.DownWare
Zillya	Tool.Audio.Win32.3
Invincea	heuristic
Cyren	W32/Trojan.ALNE-4408
APEX	Malicious
Kaspersky	not-a-virus:Downloader.Win32.OfferGenerator.gen
AegisLab	Riskware.Win32.Audio.1!c
Emsisoft	Application.Toolbar (A)
Comodo	ApplicUnwnt@#2wdvi6k3p35w0
DrWeb	Program.Unwanted.3384
VIPRE	ProsperaSoftware (fs)
Webroot	Pua.Gen
Microsoft	PUA:Win32/Accelerator
Endgame	malicious (high confidence)
ViRobot	Adware.Offergenerator.6850632
ZoneAlarm	not-a-virus:Downloader.Win32.OfferGenerator.gen
GData	Win32.Application.WebCompanion.H
VBA32	Downloader.OfferGenerator
Cylance	Unsafe
ESET-NOD32	a variant of MSIL/WebCompanion.A potentially unwanted
Yandex	Riskware.Agent!
Fortinet	Riskware/Audio
Qihoo-360	Win32/Virus.Downloader.5fe

How to remove PUP.Optional.DownWare?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

PUP.Optional.DownWare removal instruction