PUA

X-Force Keymaker (PUA) malicious file

Malware Removal

The X-Force Keymaker (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What X-Force Keymaker (PUA) virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine X-Force Keymaker (PUA)?


File Info:

crc32: EFB1BFD4
md5: 3f3f4ed6efb457de39ce30ea42b83b5c
name: xf-adsk2015_x86.exe
sha1: 309b9e0f6e703d6caa74cb4c1aca06a35b3e0197
sha256: 9750897ae571e7a993fb4c7ed5b0c9840b3ac2c36a60a1e4ceb4a1ed62f9fe4e
sha512: 86f47a478a85a9533d54b9203916091b9a287a3f3213fa868236c4670c0360554577dca611a936867c1dd0bb1999519703157a600d2b7d485e2c47d3e3aa76a5
ssdeep: 6144:RUQggEm2KnBkNE6i1ESTrilqtl8KHHOwKG/7/k7wIWkbcoSQ:2XmJnuOFXTrionnOBcJIZcoSQ
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

X-Force Keymaker (PUA) also known as:

FireEyeGeneric.mg.3f3f4ed6efb457de
McAfeeHTool-Keygen.c
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabRiskware.Win32.Malicious.1!c
SangforMalware
K7AntiVirusTrojan ( 004b4c551 )
K7GWTrojan ( 004b4c551 )
TotalDefenseWin32/Tnega.UePDbYD
APEXMalicious
AvastWin32:PUP-gen [PUP]
ClamAVWin.Trojan.Sality-115554
GDataWin32.Application.Agent.I5VGFR
AlibabaHackTool:Win32/Generic.861792a9
ViRobotRiskTool.Keygen.298496
RisingTrojan.Occamy!8.F1CD (CLOUD)
Endgamemalicious (moderate confidence)
SophosX-Force Keymaker (PUA)
ComodoMalware@#1ow4wuzi1qbmx
DrWebTool.Keygen.4
TrendMicroCRCK_ACTIVATOR
McAfee-GW-EditionBehavesLike.Win32.SoftPulse.dc
MaxSecureTrojan.Malware.11038294.susgen
Trapminemalicious.moderate.ml.score
IkarusHackTool.XForce
WebrootW32.Gen.Bt
MAXmalware (ai score=99)
ArcabitRiskware.Generic
SUPERAntiSpywareHack.Tool/Gen-Keygen
MicrosoftHackTool:Win32/Keygen
AhnLab-V3Unwanted/Win32.KeyGen.R268531
MalwarebytesRiskWare.Tool.HCK
PandaPUP/Keygen
ESET-NOD32a variant of Win32/Keygen.HA potentially unsafe
TrendMicro-HouseCallCRCK_ACTIVATOR
YandexTrojan.Igent.bTwF4W.3
SentinelOneDFI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetRiskware/KeyGen
AVGWin32:PUP-gen [PUP]
Cybereasonmalicious.f6e703

How to remove X-Force Keymaker (PUA)?

X-Force Keymaker (PUA) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment