pup.optional file or virus

[PEV]

Hi again

I recently did a PC scan using Malware Bytes and it turned up an item called pup.optional.

I did a Gogle on this and was somewhat alarmed to see it descibed as a virus in some forms.

Can you tell me if this is something to worry about?

ATM it is held secure by Malware Bytes.

Ray

[PEV]

Apparently this threat had not been contained because although I was told I had removed it. When I did a rescan it was once again detected!

Advice please

Ray

[seedy21]

Hi PEV,

 

While you are waiting for the Security Team i would run Adwcleaner on your machine as this also seems to detected and remove this threat.

 

Please download AdwCleaner by Xplode onto your desktop.

 

 

• 
   
  
• Close all open programs and internet browsers.
   
  
• Double click on adwcleaner.exe to run the tool.
   
  
• Vista/Windows 7/8 users right-click and select Run As Administrator.
   
  
• Click on the Scan button.
   
  
• AdwCleaner will begin to scan your computer.
   
  
• After the scan has finished...
   
  
• Click on the Clean button.
   
  
• Press OK when asked to close all programs and follow the onscreen prompts.
   
  
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
   
  
• After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
   
  
• Copy and paste the contents of that logfile in your next reply.
   
  
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.
   
  

[Starbuck]

Hi Ray,

 

PuP = Potentially Unwanted Program.

These are those annoying things that get added by software vendors when you install a freeware program.

Usually there's an option to NOT install the extras.... but sometimes it's not made very clear.

The reason they call it Potentially Unwanted..... is that some people may actually install it of their own freewill ( no idea why though)

 

They aren't really dangerous.... just annoying.

 

Follow the advice given by Seedy21 and you should be fine.

AdwCleaner is designed to specifically remove Adware and unwanted toolbars.

 

Let us know how it goes.

[PEV]

Thanks guys for your latest help.

By the way not to put myself up as the 'hero' but I would like to tell anyone who uses this forum that following the appeal for donation funds to keep this forum going I have made a donation. I hope other forum users who have had sometimes critical help/advice like me from the forum will also make a donation because even a small one from a few of us will get to the target amount needed.

I find it very surprising and sad that zero donations have been received prior to mine. I have given with my financial position (not good) for me a substantial donation. Thing is all the help I have had so far would have cost me the earth from a professional to help with my PC problems over the last couple of years!

This forum is fantastic for anyone who needs a helping hand! everyone please help.

Just in case anyone's wondering? I have absolutely no connection with those who run Extreme Tech Support - Free PC Help i'm just a grateful registered user.

Ray

[Starbuck]

Many thanks for your comments Ray.

It really is appreciated.

 

Just to add.... none of the staff receive any money from the donations ( all our time is given freely) it all goes to help pay the 'server fees'.

Edited September 5, 2013 by Starbuck

[RandyL]

Ray we appreciate your extremely generous donation. People like you help us stay online so that we can help not just you but many others. We all thank you. All the members benefit from your generosity.

 

Everyone here at FPCH does indeed work for free as Starbuck said. I too am one who has benefited many times from their free and excellent advice.

 

For you to take the time to help us warms my heart. Now I have to go thank another grateful member who is helping to keep this forum going.

 

Thanks Ray.

[PEV]

Hi Sedy

Here's the report from Adwcleaner

# AdwCleaner v3.002 - Report created 07/09/2013 at 00:10:48

# Updated 01/09/2013 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : Ray - DESKTOP

# Running from : I:\Documents and Settings\Ray\Local Settings\Temporary Internet Files\Content.IE5\0BCBBW97\adwcleaner[1].exe

# Option : Clean

***** [ Services ] *****

 

***** [ Files / Folders ] *****

Folder Deleted : I:\Documents and Settings\All Users\Application Data\ParetoLogic

Folder Deleted : I:\Program Files\mapsgalaxy_39

Folder Deleted : I:\Documents and Settings\Ray\IECompatCache

Folder Deleted : I:\Documents and Settings\Ray\Local Settings\Application Data\iac

Folder Deleted : I:\Documents and Settings\Ray\Application Data\DriverCure

Folder Deleted : I:\Documents and Settings\Ray\Application Data\mapsgalaxy_39

Folder Deleted : I:\Documents and Settings\Ray\Application Data\ParetoLogic

***** [ Shortcuts ] *****

 

***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [MapsGalaxy Search Scope Monitor]

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [MapsGalaxy_39 Browser Plugin Loader]

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{13119113-0854-469D-807A-171568457991}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{33119133-0854-469D-807A-171568457991}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8F0B76E1-4E46-427B-B55B-B90593468AC6}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C66A678D-5E6C-4AF9-8F57-C6192F42CF74}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C66A678D-5E6C-4AF9-8F57-C6192F42CF74}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F0B76E1-4E46-427B-B55B-B90593468AC6}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9A216821-0EC5-49A3-85AC-FB72AE79A1E8}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9A216821-0EC5-49A3-85AC-FB72AE79A1E8}

Key Deleted : HKCU\Software\MapsGalaxy_39

Key Deleted : HKCU\Software\OCS

Key Deleted : HKLM\Software\MapsGalaxy_39

Product Deleted : Google Update Helper

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

 

*************************

AdwCleaner[R0].txt - [2869 octets] - [06/09/2013 22:52:23]

AdwCleaner[s0].txt - [2858 octets] - [07/09/2013 00:10:48]

########## EOF - I:\AdwCleaner\AdwCleaner[s0].txt - [2918 octets] ##########

Hope it's worked OK?

Ray

[Starbuck]

Hi Ray,

 

Hope it's worked OK?

Well AdwCleaner has removed some unwanted stuff.

Do you still get a 'pup.optional' entry when MBAM is run?

 

Just for the record:

# Running from : I:\Documents and Settings\Ray\Local Settings\Temporary Internet Files\Content.IE5\0BCBBW97\adwcleaner[1].exe

AdwCleaner has been run from the Temp Internet files.

You should have clicked on Save and not on Run when downloading the program.

No harm caused this time as we have the report..... but if needed again, it would have to be downloaded fresh.

[PEV]

hI Starbuck

When I next run Malwarebytes we will know if the pup thing is there!

Thanks again

Ray