PUA

PUP.Optional.InffinityInternet removal instruction

Malware Removal

The PUP.Optional.InffinityInternet is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.InffinityInternet virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
download.software112.com
www.carbonporn.com

How to determine PUP.Optional.InffinityInternet?


File Info:

crc32: A2DE4460
md5: 364d325000b76c0445944543e9898efa
name: 364D325000B76C0445944543E9898EFA.mlw
sha1: 2e60b9a15d8d11f911da75f23446dbab42271d2d
sha256: 6721c5d4486f2e3b5193b010935db562a08ef4205ffd25c4c85ab51c475f2c29
sha512: 065a11d26ca34bb2831c58f50886b257c2395d59dbbb5897c3c22bc2b8c7b1ebb7048a42199cacf4f7b816dd22997797028b43664b7e49d01fcc7943d4a26ec1
ssdeep: 3072:UgXdZt9P6D3XJk45VAQnn3UQwIAwP5kYOwmYv:Ue34aqDn/bRkY9mYv
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

PUP.Optional.InffinityInternet also known as:

Elasticmalicious (high confidence)
FireEyeGeneric.mg.364d325000b76c04
Qihoo-360Win32/Virus.Downloader.9ea
McAfeeArtemis!364D325000B7
CylanceUnsafe
ZillyaAdware.GenericCRTD.Win32.1464
SangforPUP.Win32.Bibado.mt
K7AntiVirusUnwanted-Program ( 004a9cfd1 )
AlibabaDownloader:Win32/Toggle.fc7fa377
K7GWUnwanted-Program ( 004a9cfd1 )
Cybereasonmalicious.15d8d1
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:Downloader.Win32.InstallM.gen
NANO-AntivirusRiskware.Nsis.Adware.dpyzfo
ViRobotAdware.Toggle.100824.E
AvastFileRepMalware [PUP]
SophosGeneric Reputation PUA (PUA)
F-SecureAdware.ADWARE/Adware.Gen
DrWebAdware.Downware.1036
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis
EmsisoftApplication.AdLoad (A)
GDataNSIS.Application.Odabib.A
AviraADWARE/Adware.Gen
Antiy-AVLTrojan/Win32.SGenericS:CD
GridinsoftAdware.Win32.Downloader.oa
AegisLabTrojan.Multi.Generic.lJ3k
ZoneAlarmnot-a-virus:HEUR:Downloader.Win32.InstallM.gen
MicrosoftPUA:Win32/Bibado
CynetMalicious (score: 85)
VBA32Downloader.InstallM
MalwarebytesPUP.Optional.InffinityInternet
ESET-NOD32Win32/Toggle.H potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002H0CA321
SentinelOneStatic AI – Suspicious PE – Adware
FortinetRiskware/Toggle
AVGFileRepMalware [PUP]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove PUP.Optional.InffinityInternet?

PUP.Optional.InffinityInternet removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment