OCSetupHlp.dll

[MadamSvendsen]

I have just discovered this dll is pressent in my 'Malware exclusion' list. Can this really be true? I have not placed it there myself.

The file is placed in 'C;\Users\<admin account>\AppData\Local\Temp\nscCA72.tmp\OCSetupHlp.dll'.

 

I am running Windows 10 64 bit with Malwarebytes Anti-Malware Home (Premium) 2.2.0.1024 and Avira Free Antivirus ver. 15.0.15.141.

 

I have had issues with 99.99% CPU usage and wanted to make an exclusion in Malwarebytes for Avira but found this file instead. 

 

Please advice. Can I remove this, and do you have in guidance as to how it ended there?

[1PW]

Hello MadamSvendsen and
 
Although at this point it would be nearly impossible to guess the attack vector(s) that wrote the OpenCandy adware entry (OCSetupHlp.dll) into MBAM's Malware Exclusion entries, your next move should be to thoroughly check the remainder of the W10 system for malware/adware.
 
I recommend following the advice from the topic: Available Assistance for Possibly Infected Computers and have one of the Malware Removal Experts assist you with your issue.

If, as recommended, you do open a topic in Malware Removal Help, please make reference to this thread.

If you would like to get off to a very fast start, the Malware Removal Experts would appreciate it if you would also attach (not copy/paste) both the FRST.txt and the Addition.txt output diagnostic reports from only Log Set 1 into your new topic. Please do not tick, nor untick, any pre-configured FRST categories.
 
When and after you are given the "All Clear" okay from a Malware Removal Expert, then please consider enlisting the benefits of MBAM's Self-protection module per: https://www.malwarebytes.org/support/guides/mbam/AdvancedSettings.html > Enable self-protection module/Enable self-protection early start.

 

Also, please temporarily delay entering Avira's directories/files in MBAM's Malware Exclusions until the system has been cleaned and a re-evaluation has been considered.

Thank you.