Categories: PUA

PUP.Optional.RuBar removal tips

The PUP.Optional.RuBar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.RuBar virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine PUP.Optional.RuBar?


File Info:
name: C20F90D277BA10C98200.mlwpath: /opt/CAPEv2/storage/binaries/ee7a3ea7845ae96d7ebfbebe0814dfd5c9167ce8469f807580c93d2e407f3d23crc32: 6D92CA71md5: c20f90d277ba10c98200cb3e94b8d100sha1: b075b10e948fa016688433498daf85729a3c064csha256: ee7a3ea7845ae96d7ebfbebe0814dfd5c9167ce8469f807580c93d2e407f3d23sha512: 66ddcc96e74ac78f4cb01c0f03d047c7e9dc26dcaa902df81924d444898f4ca868f9b8268d55601839ae1921ae4ff43fe035bb0fc87c235b6a72622ed0648804ssdeep: 1536:KeUuCmuSyYFQn8joDTRocsYFuyEDF2h373llnxG+QonOn4j/WAv83EcyEgOs4gP:KpuCmuI8Xu1B2ZfvcwPtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T130F32B07F9B3B270CAC884B5F149A1B20D175D0D62011853B7687D463FEA96BABBEF50sha3_384: f95771be492abf620235794f1b26132a97c6909ba524a82c08b04a1d139e117f757f339d8ff5927ac1db9aa9c5eeed94ep_bytes: 5589e583ec18c7042402000000ff1558timestamp: 2014-04-28 22:25:46
Version Info:
0: [No Data]

PUP.Optional.RuBar also known as:

Lionic	Trojan.Multi.Generic.mzWL
DrWeb	Trojan.LoadMoney.1
MicroWorld-eScan	Gen:Application.LoadMoney.1
ClamAV	Win.Trojan.Loadmoney-12145
FireEye	Generic.mg.c20f90d277ba10c9
CAT-QuickHeal	TrojanDownloader.Ogimant.A7
Skyhigh	Adware-FUI
McAfee	Adware-FUI
Malwarebytes	PUP.Optional.RuBar
Zillya	Trojan.Kryptik.Win32.535583
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Dorv.7cb963ce
K7GW	Trojan ( 005690671 )
K7AntiVirus	Trojan ( 0040f53f1 )
Arcabit	Application.LoadMoney.1
BitDefenderTheta	Gen:NN.ZexaF.36744.kCX@aiHl9wdc
VirIT	Trojan.Win32.LoadMoney.HF
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.CGBF
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:UDS:AdWare.Win32.LMN.gen
BitDefender	Gen:Application.LoadMoney.1
NANO-Antivirus	Trojan.Win32.LoadMoney.dnqcaw
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13ffd7b8
Emsisoft	Gen:Application.LoadMoney.1 (B)
F-Secure	PotentialRisk.PUA/LoadMoney.Gen7
Baidu	Win32.Trojan.Kryptik.dl
VIPRE	Gen:Application.LoadMoney.1
TrendMicro	TROJ_OGIMANT.SMB
Trapmine	malicious.moderate.ml.score
Sophos	Troj/LdMon-A
Ikarus	Trojan.Win32.Spy
Jiangmin	Trojan/Generic.atwqf
Webroot	W32.Trojan.Gen
Google	Detected
Avira	PUA/LoadMoney.Gen7
Antiy-AVL	Trojan/Win32.Kryptik
Kingsoft	malware.kb.a.977
Xcitium	TrojWare.Win32.Kryptik.BWIO@58g6zq
Microsoft	PUAAdvertising:Win32/LoadMoney
ViRobot	Trojan.Win.Z.Loadmoney.167968.B
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.LMN.gen
GData	Gen:Application.LoadMoney.1
Varist	W32/LoadMoney.K.gen!Eldorado
AhnLab-V3	PUP/Win32.LoadMoney.R228134
VBA32	BScope.Downloader.LMN
ALYac	Gen:Application.LoadMoney.1
MAX	malware (ai score=99)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_OGIMANT.SMB
Yandex	PUA.DL.Agent!ttSK08UJOSo
SentinelOne	Static AI – Malicious PE
MaxSecure	not-a-virus:Downloader.LMN.a
Fortinet	W32/Generic.AC.6F6F!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.e948fa
DeepInstinct	MALICIOUS