PUA

PUP.Optional.Somoto removal guide

Malware Removal

The PUP.Optional.Somoto is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.Somoto virus can do?

  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine PUP.Optional.Somoto?


File Info:

crc32: A8224D25
md5: d2388b5ed206ffa06ad1aeecc687b1db
name: D2388B5ED206FFA06AD1AEECC687B1DB.mlw
sha1: 90bcb0e76aa7528e4393fc59ebf7ecbed93917e6
sha256: dcdda948dbfa3ef58a0718cf22916686848edcb401e7f2677593d18d8c5810d5
sha512: 5e9cbbb81a9bbddd1148cc65001a27007fcbe01ba46699e83bcbc1aafdc0f860d02371d94132598f1376a6087702837c507402abe214c8c1b0075b82bca3ad50
ssdeep: 12288:jzihu4RO1+PuNZqhrrxzRKyu5qOdWqyiaT0+k1fgOXPrh1jHsNpEMWgaISsweFBL:jzihzO1+mqhC7dWqOZHOXdOpEMXosfBL
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

PUP.Optional.Somoto also known as:

Elasticmalicious (high confidence)
DrWebTrojan.DownLoader21.43120
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.76aa75
SymantecML.Attribute.HighConfidence
Kasperskynot-a-virus:Downloader.Win32.Somoto.te
NANO-AntivirusTrojan.Nsis.Somoto.epngnc
EmsisoftAdware.Generic (A)
F-SecureHeuristic.HEUR/AGEN.1105232
ZillyaAdware.GenericCRTD.Win32.1396
McAfee-GW-EditionArtemis!PUP
FireEyeGeneric.mg.d2388b5ed206ffa0
SophosGeneric PUA JA (PUA)
AviraHEUR/AGEN.1105232
Antiy-AVLRiskWare[Downloader]/Win32.DownloAdmin.aoww
MicrosoftPUA:Win32/OpenDownloadManager
ZoneAlarmnot-a-virus:Downloader.Win32.Somoto.te
CynetMalicious (score: 85)
McAfeeArtemis!D2388B5ED206
VBA32Downloader.Somoto
MalwarebytesPUP.Optional.Somoto
PandaTrj/CI.A
SentinelOneStatic AI – Suspicious PE – Adware
Qihoo-360Win32/Trojan.f10
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)

How to remove PUP.Optional.Somoto?

PUP.Optional.Somoto removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment