PUP. ScorpionSaver

[debramb]

Can someone tell me why the above keeps coming back?  Malwarebytes Pro picks it up even after I clean the PC. Just turned it on.  Appx: 131 hits. this time. With a few scattered in Program Files, All over the computer. Malwarebytes puts it in quarantine. and I check all the boxes and remove it. Avast Free AV does not pick it up? I have it configured for PUP on scan. I read all I can from Google and, the search box here. Maybe its because my "scanner settings" in Malwarebytes are set for "Action for PUP" Show in results List and do not check for removal. thanks for your help.

[daledoc1]

Hi, debramb:

 

Yes, the default setting for PUPs is to detect them but NOT to check them for automatic removal.

This pinned topic explains why (and more): What are the 'PUP' detections, are they threats, and should they be deleted?

If you want to change the settings so that all PUPs will be automatically checked for removal, please see the steps here: Selecting All PUPs

 

Having said all that, Scorpion Saver is one the newer, more challenging PUPs that can be a real pain to fully remove.

You are not alone...

 

We don't do malware removal in this section of the forum, so I suggest that you please start with the advice here: Available Assistance for Possibly Infected Computers

One of the experts will guide you through the process.

 

HTH,

 

daledoc1

[debramb]

Hi, debramb:

 

Yes, the default setting for PUPs is to detect them but NOT to check them for automatic removal.

This pinned topic explains why (and more): What are the 'PUP' detections, are they threats, and should they be deleted?

If you want to change the settings so that all PUPs will be automatically checked for removal, please see the steps here: Selecting All PUPs

 

Having said all that, Scorpion Saver is one the newer, more challenging PUPs that can be a real pain to fully remove.

You are not alone...

 

We don't do malware removal in this section of the forum, so I suggest that you please start with the advice here: Available Assistance for Possibly Infected Computers

One of the experts will guide you through the process.

 

HTH,

 

daledoc1

Thank you ! I used the tools I did a search on your website here: https://forums.malwarebytes.org/index.php?showtopic=137594&hl=%2Bscorpionsaver#entry760245

One question please. In the Settings/Scanner Settings of Malwarebytes. Should I change it to: Show in results list and check for removal ? 

 Or show in results list and Do Not Check for removal? (thats what I may have changed it to now)  Thanks again !

[daledoc1]

Hi:

 

Sorry if I wasn't clear.

 

Each computer is unique.

So solving a problem or removing an infection that may sound "the same" as that on another user's computer can be very dangerous, as it can cause system damage.

I didn't mean to suggest that you should follow instructions given to another user in another post.

 

Rather, the suggested steps are to:

1) Follow the advice here: https://forums.malwarebytes.org/index.php?showtopic=9573

2) Start a new, separate post in the malware removal section for individual help here: https://forums.malwarebytes.org/index.php?showforum=7

 

ScorpionSaver can be quite difficult to remove and require powerful tools and even editing the registry.

It's not advisable to undertake this sort of thing without expert help.

 

So, even if you think you might be clean, I would still respectfully suggest that you might want to follow the advice above and have one of the malware experts look into this with you.

It's free and will only cost you a bit of your time.

 

But it's up to you,

 

daledoc1

 

P.S. As for the PUP settings, that's up to you.  Please refer to the pinned topic in my earlier reply. Personally, I wouldn't want any of them on my system.  So, I would change the setting so that they would be automatically detected and checked for removal.  If you're not sure what to keep/ignore and/or what to remove/quarantine, then my advice would again be to have one of the malware experts help you with this -- they can review your logs with you and clean anything you want to remove.

[debramb]

Hi:

 

Sorry if I wasn't clear.

 

Each computer is unique.

So solving a problem or removing an infection that may sound "the same" as that on another user's computer can be very dangerous, as it can cause system damage.

I didn't mean to suggest that you should follow instructions given to another user in another post.

 

Rather, the suggested steps are to:

1) Follow the advice here: https://forums.malwarebytes.org/index.php?showtopic=9573

2) Start a new, separate post in the malware removal section for individual help here: https://forums.malwarebytes.org/index.php?showforum=7

 

ScorpionSaver can be quite difficult to remove and require powerful tools and even editing the registry.

It's not advisable to undertake this sort of thing without expert help.

 

So, even if you think you might be clean, I would still respectfully suggest that you might want to follow the advice above and have one of the malware experts look into this with you.

It's free and will only cost you a bit of your time.

 

But it's up to you,

 

daledoc1

 

P.S. As for the PUP settings, that's up to you.  Please refer to the pinned topic in my earlier reply. Personally, I wouldn't want any of them on my system.  So, I would change the setting so that they would be automatically detected and checked for removal.  If you're not sure what to keep/ignore and/or what to remove/quarantine, then my advice would again be to have one of the malware experts help you with this -- they can review your logs with you and clean anything you want to remove.

Thank you !  I removed it for now. Even from the reg!  Just was wondering where it came from? Have a nice day ! 

[daledoc1]

Hi:

 

Again, this pinned topic explains what PUPs are and how they get onto the computer better than I can.

They may come with legitimate software that you installed on your computer.

 

Best regards,

 

daledoc1

 

[CWB]

"Thank you !  I removed it for now ..."

not too clear from your last post ... are you intending to head over to the "malware removal section" asap ?

i strongly suggest doing so ... as DD1 mentioned , what works for one machine may not work in entirety in/for another machine .

[debramb]

"Thank you !  I removed it for now ..."

not too clear from your last post ... are you intending to head over to the "malware removal section" asap ?

i strongly suggest doing so ... as DD1 mentioned , what works for one machine may not work in entirety in/for another machine .

Thank you for the topics!  I removed all of it last night. First tool to pick it up is Malwarebytes Pro ! Used four other tools today and nothing so far. I'll go to malware removal when 

I'm stuck with something I can't remove. Thank you all !  

[CWB]

hmmm ...

allow me to re-iterate and expand a bit more .

you can think you have removed the causation of a problem when in reality there is something that is hidden/buried that the commonly available tools will not pick up .

this is the nature of malware ... to be sneaky and in some cases covert in nature .

there are instances of one type of malware being a "gateway" for other nefarious items to get into your machine ...

among these types of programs are those which can be hidden in the background .

there is an old saying : "it is better to be safe than sorry" .

[debramb]

@ CWB I'll meet you 1/2 way.  If I get it again I'll see the removal personal.  nothing  hidden/buried since 12/02, thank you. Post no. 6 above: "They may come with legitimate software that you installed on your computer."

That ticks me off !