Jump to content

Question about PUP entries


Recommended Posts

After a quick scan, I have deleted all the items it found which involved 'files' but I'm scared to remove all the 'Registry' type items. Can you advise on this lot please? I'm a novice at this kind of thing so am very wary of zapping something in error!

Thanks.

ytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.10.28.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
VPCJ1 :: VPCJ1-VAIO [administrator]

28/10/2013 13:29:26
MBAM-log-2013-10-28 (13-39-43).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 224068
Time elapsed: 8 minute(s), 34 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 14
HKCR\CrossriderApp0033906.BHO (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0033906.BHO.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0033906.Sandbox (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0033906.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> No action taken.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> No action taken.
HKCU\SOFTWARE\WEBCONNECT (PUP.Optional.WebConnect.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311391106} (PUP.Optional.CrossRider.M) -> No action taken.
HKCR\CLSID\{11111111-1111-1111-1111-110311391106} (PUP.Optional.CrossRider.M) -> No action taken.
HKCR\TypeLib\{44444444-4444-4444-4444-440344394406} (PUP.Optional.CrossRider.M) -> No action taken.
HKCR\Interface\{55555555-5555-5555-5555-550355395506} (PUP.Optional.CrossRider.M) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311391106} (PUP.Optional.CrossRider.M) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311391106} (PUP.Optional.CrossRider.M) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311391106} (PUP.Optional.CrossRider.M) -> No action taken.

Registry Values Detected: 2
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Data: 1J1S1F1T2X -> No action taken.
HKCU\Software\WebConnect|iid (PUP.Optional.WebConnect.A) -> Data: def_WebConnect -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0

Link to post
Share on other sites

  • Root Admin

All of those entries should be okay to remove. 

Create a new System Restore Point and then have MBAM remove those entries for you.

Then reboot and check for updated in MBAM and do another Quick Scan to make sure they're all gone still.

 

How to Create a System Restore Point in Windows 7

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.