Categories: PUA

PUP.Optional.Webserver.HFS (file analysis)

The PUP.Optional.Webserver.HFS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.Webserver.HFS virus can do?

Creates RWX memory
Starts servers listening on 0.0.0.0:80
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

How to determine PUP.Optional.Webserver.HFS?


File Info:
crc32: 64CB34E2md5: 45f05edc396b80d9157564c1e27662e5name: 45F05EDC396B80D9157564C1E27662E5.mlwsha1: f15832986cd0cd6e6f00018811cdd20158c30cedsha256: 3161531ca77928bc1850253396dbcfb60fb9ca7cd6544a6d6d8b67bc977d162asha512: 64979d307c263e5a7d2b2b09b2c1ddca71f92aa6831b265a037033ffad771e686b58d8c8c839cd6c530b8cc3ff9d98661c91b3462ba6eb99a96db8a75ce7b41dssdeep: 24576:4qnW/wwzHeKN683oyI9qaAeUXH0FBEehWv3c:4qnMNOyI9q+UXH0bzWctype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright (C) 2002-2010  Massimo Melina (www.rejetto.com)InternalName: HFSFileVersion: 2.3.0.0CompanyName: rejettoLegalTrademarks: Comments: ProductName: Http File Server x968fx6ce2x6c49x5316x7248ProductVersion: 2.3FileDescription: OriginalFilename: hfs.exeTranslation: 0x0804 0x03a8

PUP.Optional.Webserver.HFS also known as:

K7AntiVirus	Unwanted-Program ( 004d38111 )
Cylance	Unsafe
K7GW	Unwanted-Program ( 004d38111 )
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Server-Web.HFS.A potentially unsafe
Avast	Win32:Malware-gen
Sophos	Generic PUA PB (PUA)
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
Trapmine	malicious.moderate.ml.score
Jiangmin	Server-FTP.SFH.s
AegisLab	Trojan.Win32.Generic.4!c
AhnLab-V3	PUP/Win32.HFS.R99646
McAfee	Artemis!45F05EDC396B
Malwarebytes	PUP.Optional.Webserver.HFS
Yandex	Riskware.FTPSrv!
Ikarus	PUA.Server-Web.Hfs
Fortinet	Riskware/SFH
AVG	Win32:Malware-gen