Jump to content

Possible false positive - PUP.Optional.Yontoo.ChrPRST


Recommended Posts

Since 2/20/17, scans have been detecting signs of PUP.Optional.Yontoo.ChrPRST which I believe to be a false positive. The scan I performed 24 hours prior did not show this detection and nothing of consequence was installed during that period that I can recall.  When I quarantine the affected items, my Windows profile is significantly affected; therefore, I restored all quarantined items for the time being.

I would appreciate it if someone can confirm this suspected false positive and make the appropriate adjustments to the signature files.


MBAM Yontoo FP.zip

Link to post
Share on other sites

I wish I had a more detailed description, but, essentially, all desktop and interface customizations specific to my Windows profile were gone, replaced by Windows' defaults. I also received an error message that a temporary profile was loaded, likely due to files/registry entries related to my profile were quarantined by MBAM. 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.