PUA

How to remove “PUP.Optional.Softcnapp”?

Malware Removal

The PUP.Optional.Softcnapp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.Softcnapp virus can do?

  • Presents an Authenticode digital signature
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Network activity contains more than one unique useragent.
  • Attempts to modify proxy settings

Related domains:

api.ip138.com
dwoncdn.xiald.com
down.xiald.com
dwoncdn2.xiald.com
www.9973.com
xzqtj.xiald.com

How to determine PUP.Optional.Softcnapp?


File Info:

crc32: A871DABD
md5: 5ef2ab06dd30706f49fab71e814f8183
name: apk___u00199295_193_870482.exe
sha1: b103f9c2e4d8a40c34c432946702d8165b26901a
sha256: d1dafc97c65c5d29235c3635a7f1ffe1bd8f32c12e75180954be2938558d18c2
sha512: ffc8b0b2b658d7cbb55079dc97922f833ce07bb64a4f46ca710ebcbf1e1d687963882b7272b23ce009d282771bc1b041e780626c9137fd356e7b7a1ebb7c187a
ssdeep: 49152:4Jz9BBklwi4oXf2lVfw3MHaK9YtF/bHJO3RTGh:gBB0ws2LfzHaKmMM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2018
InternalName: x9ad8x901fx4e0bx8f7dx5668
FileVersion: 1.5.8.19123
CompanyName: x9ad8x901fx4e0bx8f7dx5668
ProductName: x9ad8x901fx4e0bx8f7dx5668
ProductVersion: 1,5,8,19123
FileDescription: x9ad8x901fx4e0bx8f7dx5668
OriginalFilename: Install.exe
Translation: 0x0804 0x04b0

PUP.Optional.Softcnapp also known as:

MicroWorld-eScanGen:Variant.Ulise.93227
McAfeePUP-XJH-QB
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 004d9e2c1 )
BitDefenderGen:Variant.Ulise.93227
K7GWAdware ( 004d9e2c1 )
Invinceaheuristic
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Softcnapp.J potentially unwanted
APEXMalicious
GDataGen:Variant.Ulise.93227
Kasperskynot-a-virus:AdWare.Win32.Agent.xxyqqy
AlibabaAdWare:Win32/Softcnapp.70e124d5
NANO-AntivirusRiskware.Win32.Softcnapp.grzwhi
ViRobotAdware.Softcnapp.2206120.A
AvastWin32:AdwareX-gen [Adw]
TencentMalware.Win32.Gencirc.10b88fde
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Ulise.93227 (B)
ComodoMalware@#2w32pnkzembsn
DrWebAdware.Softcnapp.119
ZillyaAdware.Agent.Win32.147488
TrendMicroTROJ_FRS.VSNTLH19
McAfee-GW-EditionPUP-XJH-QB
MaxSecureTrojan.Malware.74728229.susgen
FireEyeGen:Variant.Ulise.93227
SophosGeneric PUA LB (PUA)
CyrenW32/Trojan.DEQC-6345
JiangminAdware.Agent.alqp
WebrootW32.Adware.Gen
ArcabitTrojan.Ulise.D16C2B
AegisLabAdware.Win32.Agent.2!c
ZoneAlarmnot-a-virus:AdWare.Win32.Agent.xxyqqy
MicrosoftPUA:Win32/CoinMiner
AhnLab-V3PUP/Win32.Softcnapp.R306983
ALYacGen:Variant.Ulise.93227
MAXmalware (ai score=99)
VBA32BScope.Adware.Puwaders
MalwarebytesPUP.Optional.Softcnapp
TrendMicro-HouseCallTROJ_FRS.VSNTLH19
RisingAdware.Downloader!1.BBEC (CLOUD)
YandexPUA.Agent!
SentinelOneDFI – Suspicious PE
eGambitUnsafe.AI_Score_82%
FortinetRiskware/Softcnapp
Ad-AwareGen:Variant.Ulise.93227
AVGWin32:AdwareX-gen [Adw]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_60% (D)

How to remove PUP.Optional.Softcnapp?

PUP.Optional.Softcnapp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment