Jump to content

PUP.BundleInstaller.IQ Alert 070112


Recommended Posts

I received the alert today. Since it is a Potentially Unwanted Program I would like to know--before taking any action--whether this is a real threat or not. This is only maybe the second alert I have ever received after four years of using Malwarebytes.Noticed that it is within my restore points. Couldn't I just delete all restore points and that will accomplish the same goal?

Thanks

Malwarebytes Anti-Malware 1.61.0.1400

www.malwarebytes.org

Database version: v2012.06.30.07

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

[administrator]

6/30/2012 10:28:34 PM

mbam-log-2012-07-01 (09-55-24).txt

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 382206

Time elapsed: 5 hour(s), 39 minute(s), 48 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 2

C:\System Volume Information\_restore{B24E5507-24F3-4A69-BD0B-D12A76B83EC2}\RP302\A0052595.exe (PUP.BundleInstaller.IQ) -> No action taken.

C:\System Volume Information\_restore{B24E5507-24F3-4A69-BD0B-D12A76B83EC2}\RP302\A0052594.exe (PUP.BundleInstaller.IQ) -> No action taken.

(end)

Link to post
Share on other sites

Hello and :welcome:

PUP means Potentially Unwanted Program and its your choice whether you would want to keep it or not.

In your case since its in the restore points, you are correct, if you delete all your restore points, then create a new restore point, it would get rid of this.

After you have done that you could always run another quick scan to make sure its all gone.

Link to post
Share on other sites

Thanks Firefox,

Although I it takes about five hours to run, I will likely run a full scan. I have already run Avast with no results except a couple of unrelated files that would not scan. I will post results after scan is complete.

Link to post
Share on other sites

Thanks again Firefox. I ran the full scan because I went to a site--yesterday-- that I knew may have had issues and sure enough I get the alert from Malwarebytes today. I run a full scan once every week to two weeks. I didn't want to take any chances. Perhaps it was a bit of overkill but since I know that the site was likely dirty...

Here is a copy of the scan:

Malwarebytes Anti-Malware 1.61.0.1400

www.malwarebytes.org

Database version: v2012.07.01.08

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

[administrator]

7/1/2012 4:18:11 PM

mbam-log-2012-07-01 (16-18-11).txt

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 379139

Time elapsed: 5 hour(s), 19 minute(s), 58 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.