sflater Posted November 21, 2017 ID:1185504 Share Posted November 21, 2017 Please advise and let me know when it has been addressed. We have been getting alerts for the past 2 weeks now. Malwarebytes Management Server Notification -------------------------------------------- Alert Time: 11/21/2017 11:36:31 AM Server Hostname: Malwarebytes Server Domain/Workgroup: domain.com Server IP: 10.50.1.50 Notification Catalog: Client Description: Malware threat detected, see details below: 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinZip Smart Monitor Service 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\Agents 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\Agents 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\Plugins 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\Plugins\00000000-0000-0000-0000-000000000001.2.2.2.2 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\Plugins\7BC0E678-C2D8-43A4-B694-A458734AEF6D.2.1.0.10 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\settings.data 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\Agents\3A6B026B-AA3D-4B45-86C6-1556CF1DC955.1.0.0.19.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\Agents\8A1CCBD6-1CFC-4D3D-8DDB-E08E6B1E854B.1.0.0.22.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\Agents\93B7E2F7-331C-4F8C-A662-4E4153A56FE9.1.0.0.15.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\Agents\AA7A5F7A-C29D-48D8-913C-AE48EB9DCE2F.1.0.0.15.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\Agents\F9246D0B-8862-46E2-9B46-2A172A6E6C13.1.0.0.16.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\queue.data 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\settings.data 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\Agents\3A6B026B-AA3D-4B45-86C6-1556CF1DC955.1.0.0.20.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\Agents\8A1CCBD6-1CFC-4D3D-8DDB-E08E6B1E854B.1.0.0.25.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\Agents\93B7E2F7-331C-4F8C-A662-4E4153A56FE9.1.0.0.18.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\Agents\AA7A5F7A-C29D-48D8-913C-AE48EB9DCE2F.1.0.0.18.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\ProgramData\WinZip\WinZip Smart Monitor\S-1-5-21-1482476501-1275210071-725345543-8103518\Agents\F9246D0B-8862-46E2-9B46-2A172A6E6C13.1.0.0.19.json 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\apps 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\msvcp100.dll 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\msvcr100.dll 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\SystemInfo-vc100-mt.dll 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\SystemInfo-vc100-mt.mab 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\Uninstall.exe 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.mab 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.mab 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\Plugins\00000000-0000-0000-0000-000000000001.2.2.2.2\00000000-0000-0000-0000-000000000001.2.2.2.2.dll 11/21/2017 11:35:43 AM COMP1 10.50.1.100 PUP.Optional.WinzipSystemUtilitiesSuite Quarantined C:\Program Files\WinZip Smart Monitor\Plugins\7BC0E678-C2D8-43A4-B694-A458734AEF6D.2.1.0.10\7BC0E678-C2D8-43A4-B694-A458734AEF6D.2.1.0.10.dll Total count: 34. -------------------------------------------- Comment: This email was generated by Malwarebytes Management Server. Please do not reply to this message. Link to post Share on other sites More sharing options...
Staff miekiemoes Posted November 21, 2017 Staff ID:1185507 Share Posted November 21, 2017 Hi, This is no False Positive. Please see here: https://www.malwarebytes.com/pup/ If you want to keep this program, just add it to your exclusions so it's no longer detected anymore. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts