Keeps prompting for action on non-malware even though configured to treat PUP as malware

[mrbrunes]

Hi

 

I'm running Premium 2.0.2.1012 and I keep seeing a pop-up "Scan Complete - Non-malware detected" with the detected item "PUP.Optional.Spigot.A". This is even though I have Settings - Detection & Protection - Non-Malware Protection - PUP detections = Treat as malware and Advanced Settings - Automatically quarantine detected items.

 

So why does it keep prompting me what to do?

 

The Scan log says:

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 04/08/2014
Scan Time: 10:26:11
Logfile:
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.08.04.02
Rootkit Database: v2014.08.01.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: xxx

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 308983
Time Elapsed: 14 min, 47 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.Spigot.A, C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "startup_urls": [ "http://uk.search.yahoo.com?type=937811&fr=spigot-yhp-ch" ],), Replaced,[543ef3cf5c1fc4729d7217d7ba4a718f]

Physical Sectors: 0
(No malicious items detected)


(end)

[mrbrunes]

Forgt to mention that if I elect to Quarantine the item, then at some point the scan detects it again.

[daledoc1]

HI:

It may be that the setting is being regenerated from your Chrome browser sync data.
You can try these steps here:
 
http://www.howtogeek.com/103655/how-to-delete-your-google-chrome-browser-sync-data/
https://support.google.com/chrome/answer/3296214?hl=en
 
HOWEVER, the safest thing would be to have one of the malware experts assist you with this.
I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
A malware analyst will assist you with looking into your issue and with removing all traces of the PUP and any other malware.

 

Thanks,

[mrbrunes]

Another user suggested I run AdwCleaner which duly found Spigot, albeit in Program Files\Common Files rather than a Chrome folder, so I allowed it to remove it. We'll see if it is detected again.

[daledoc1]

Hi:

 

It looks as if you now have a new topic over in the malware removal section: https://forums.malwarebytes.org/index.php?/topic/154777-keep-getting-detections-for-pupoptionalspigota/

 

Please stay with your helper there, in that topic, until you are given the "all clear".

 

Thanks!