Categories: PUA

PUP.Optional.MediaGet removal instruction

The PUP.Optional.MediaGet is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.MediaGet virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine PUP.Optional.MediaGet?


File Info:
crc32: BEFE8176md5: d8778159365a1dc689b08fa9bb072852name: MediaGet_3283431405.exesha1: 3c3747b65a7812046a0a6530df239cd28d727650sha256: 87500ac5ea638a4393c92fcf2558e0e233f47bf24587e56bfdf1da7b855bcf1dsha512: 74ae5a01202b23ae18da71a3f63d40e3aa2c49eda8fcdf712b6c1967cc2b7c4fa61fa93c8c39ad8a4048832c03547d873e976e2c623d2326704824f34db94307ssdeep: 49152:kttfZZsILZa+QZlyEP519feI17cOUYM/BYz346Ec8Ui4OLXvRFOv:Ctk9nPXfe+cOnKc8UDOZEvtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright:                                                                                                     FileVersion: 3.7.2.1             CompanyName:                                                             Comments: This installation was built with Inno Setup.ProductName: Tufekepega                                                  ProductVersion: 2.1                 FileDescription: Tufekepega Setup                                            Translation: 0x0000 0x04b0

PUP.Optional.MediaGet also known as:

DrWeb	Program.MediaGet.160
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
GData	Win32.Application.InstallCore.LR@gen
Endgame	malicious (high confidence)
Comodo	ApplicUnwnt@#1vleij0id5kiv
Invincea	heuristic
Sophos	InnoMod (PUA)
Cyren	W32/Application.KXKK-6984
Microsoft	PUA:Win32/MediaGet
VBA32	SigAdware.GLOBALMICROTRADINGPTE.LTD
Malwarebytes	PUP.Optional.MediaGet
ESET-NOD32	Win32/InstallCore.AZB.Gen potentially unwanted
Rising	Packer.Win32.Obfuscator.n (CLASSIC)
Fortinet	Riskware/InnoMod
Webroot	W32.Adware.Gen