Tarma Installer - is it malware

[davidm_uk]

Just installed Malwarebytes, updated the database and run a quick scan. The only thing found were a number of entries for Tarma Installer. Should I be concerned about these (at the moment I've not taken any action, just saved the log file - see below)?

 

Thanks, David

 

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

 

Database version: v2013.08.09.07

 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16635

xxxxxx :: yyyyyyy  [administrator]

 

10/08/2013 11:24:08

MBAM-log-2013-08-10 (11-32-42).txt

 

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | 

 

Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P

Scan options disabled: 

Objects scanned: 286449

Time elapsed: 2 minute(s), 55 second(s)

 

Memory Processes Detected: 0

(No malicious items detected)

 

Memory Modules Detected: 0

(No malicious items detected)

 

Registry Keys Detected: 0

(No malicious items detected)

 

Registry Values Detected: 0

(No malicious items detected)

 

Registry Data Items Detected: 0

(No malicious items detected)

 

Folders Detected: 3

C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> No action taken.

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} 

 

(PUP.Optional.Tarma.A) -> No action taken.

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-

 

A10C2B756504}\Cache (PUP.Optional.Tarma.A) -> No action taken.

 

Files Detected: 5

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-

 

A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> No action taken.

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-

 

A10C2B756504}\Setup.dat (PUP.Optional.Tarma.A) -> No action taken.

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-

 

A10C2B756504}\Setup.ico (PUP.Optional.Tarma.A) -> No action taken.

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-

 

A10C2B756504}\_Setup.dll (PUP.Optional.Tarma.A) -> No action taken.

C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-

 

A10C2B756504}\_Setupx.dll (PUP.Optional.Tarma.A) -> No action taken.

 

(end)

[Fatdcuk]

Hi Davidm_UK

 

They are not malicious detctions but PUP >> Potentially Unwanted Program.

http://forums.malwarebytes.org/index.php?showtopic=130207

http://blog.malwarebytes.org/news/2013/07/malwarebytes-adopts-aggressive-pup-policy/

[miekiemoes]

Hi,

 

A PUP detection doesn't mean it is malware. PUP means: Potentially Unwanted Program.

If you did install Tarma willingly, then you can ignore this detection. If you were not aware this was installed or don't know the program, then it means it was probably installed without your notice (because you would be aware of it otherwise). In that case, you can let Malwarebytes delete what it has found.

[davidm_uk]

Thanks guys, I wasn't aware of Tarma being installed, so I'll probably just let MWB delete it.

[RobertaJS1]

Hi,

I'm new to using a forum so please bare with me. I came here to inquire about the tarma installer and found where some comments have been made about it, but I don't see anywhere that it explained if it's a necessary file or not, and what it does. I didn't install it myself, but what if one of the programs or files I downloaded needs it, how will I know? In my case I bet I don't need it since it was installed about a dozen times and it happened on the same day I was downloading a bunch of free fonts and icons. But, how can we know if a file like this is needed or not? Is there a way other than trial and error?

THanks!

Roberta

[miekiemoes]

Hi,

 

This file is not needed - it's just a part of the Tarma installer, and unfortunately often used to pack/bundle questionable programs. This is not required to have your programs run as it's not a part of the actual program.

[getf]

Tarma is a legitimate installation tool used by developers to create install / uninstall packages, why is MalwareBytes detecting this as a PUP?    If you delete those files, your removing the capability of the uninstall/repair options for that software.