Jump to content

Recommended Posts

  • Staff
What is Tuneup Pro?

The Malwarebytes research team has determined that Tuneup Pro is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with Tuneup Pro?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see these warnings during install:

warning1.png

warning2.png

and these screens during "operations":

warning5.png

warning6.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your list of Scheduled Tasks:

warning3.png

How did Tuneup Pro get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website:

website.png

How do I remove Tuneup Pro?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Tuneup Pro?
  • No, Malwarebytes removes Tuneup Pro completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the Tuneup Pro installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

 

protection1.png


and we block access to their domain.

Technical details for experts

You may see these entries in FRST logs:
 
 (Tuneup Pro) C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe
 C:\Windows\System32\Tasks\Tuneup Pro
 C:\Windows\System32\Tasks\Tuneup Pro_UPDATES
 C:\Windows\System32\Tasks\Tuneup Pro_DEFAULT
 C:\Windows\Tasks\Tuneup Pro_UPDATES.job
 C:\Windows\Tasks\Tuneup Pro_DEFAULT.job
 C:\Users\{username}\AppData\Roaming\Tuneup Pro
 C:\Users\Public\Desktop\Tuneup Pro.lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tuneup Pro
 C:\Program Files (x86)\Tuneup Pro
 () C:\Windows\system32\roboot64.exe

Tuneup Pro (HKLM-x32\...\Tuneup Pro_is1) (Version: 1.08 - tuneuppro.com)
Task: {20E84FB8-3016-43EC-B53A-0FB1CE6DB57A} - System32\Tasks\Tuneup Pro_UPDATES => C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe [2015-11-20] (Tuneup Pro)
Task: {4967A038-BB35-4F2B-8837-385BB62B2C53} - System32\Tasks\Tuneup Pro => C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe [2015-11-20] (Tuneup Pro)
Task: {ACDFF398-EFBF-4838-9D65-DE5339FC203F} - System32\Tasks\Tuneup Pro_DEFAULT => C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe [2015-11-20] (Tuneup Pro)
Task: C:\Windows\Tasks\Tuneup Pro_DEFAULT.job => C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe
Task: C:\Windows\Tasks\Tuneup Pro_UPDATES.job => C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe
Alterations made by the installer:
 
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\Tuneup Pro
       Adds the file Chinese_rcp.ini"="7/3/2015 1:59 PM, 48430 bytes, A
       Adds the file Chinese_uninst.ini"="7/3/2015 1:59 PM, 2688 bytes, A
       Adds the file CleanSchedule.exe"="11/20/2015 2:47 PM, 116208 bytes, A
       Adds the file Danish_rcp.ini"="7/3/2015 1:59 PM, 91724 bytes, A
       Adds the file Danish_uninst.ini"="7/3/2015 1:59 PM, 2982 bytes, A
       Adds the file Dutch_rcp.ini"="7/3/2015 1:59 PM, 95974 bytes, A
       Adds the file Dutch_uninst.ini"="7/3/2015 1:59 PM, 2982 bytes, A
       Adds the file eng_rcp.ini"="7/3/2015 1:59 PM, 85142 bytes, A
       Adds the file eng_uninst.ini"="7/3/2015 1:59 PM, 2896 bytes, A
       Adds the file FileList.rcp"="7/3/2015 1:59 PM, 13612 bytes, A
       Adds the file Finnish_rcp_fi.ini"="7/3/2015 1:59 PM, 89180 bytes, A
       Adds the file Finnish_uninst_fi.ini"="7/3/2015 1:59 PM, 3062 bytes, A
       Adds the file French_rcp.ini"="7/3/2015 1:59 PM, 102004 bytes, A
       Adds the file French_uninst.ini"="7/3/2015 1:59 PM, 3022 bytes, A
       Adds the file German_rcp.ini"="7/3/2015 1:59 PM, 101456 bytes, A
       Adds the file German_uninst.ini"="7/3/2015 1:59 PM, 3158 bytes, A
       Adds the file greek_rcp_el.ini"="7/3/2015 1:59 PM, 100648 bytes, A
       Adds the file greek_uninst_el.ini"="7/3/2015 1:59 PM, 3264 bytes, A
       Adds the file install_left_image.bmp"="7/3/2015 1:59 PM, 156296 bytes, A
       Adds the file isxdl.dll"="11/20/2015 2:47 PM, 156656 bytes, A
       Adds the file Italian_rcp.ini"="7/3/2015 1:59 PM, 98330 bytes, A
       Adds the file Italian_uninst.ini"="7/3/2015 1:59 PM, 2986 bytes, A
       Adds the file Japanese_rcp.ini"="7/3/2015 1:59 PM, 61262 bytes, A
       Adds the file Japanese_uninst.ini"="7/3/2015 1:59 PM, 2768 bytes, A
       Adds the file korean_rcp_ko.ini"="7/3/2015 1:59 PM, 69810 bytes, A
       Adds the file korean_uninst_ko.ini"="7/3/2015 1:59 PM, 2752 bytes, A
       Adds the file Norwegian_rcp.ini"="7/3/2015 1:59 PM, 88116 bytes, A
       Adds the file Norwegian_uninst.ini"="7/3/2015 1:59 PM, 2926 bytes, A
       Adds the file polish_rcp_pl.ini"="7/3/2015 1:59 PM, 91672 bytes, A
       Adds the file polish_uninst_pl.ini"="7/3/2015 1:59 PM, 3104 bytes, A
       Adds the file portugese_rcp_pt.ini"="7/3/2015 1:59 PM, 94970 bytes, A
       Adds the file portugese_uninst_pt.ini"="7/3/2015 1:59 PM, 2988 bytes, A
       Adds the file Portuguese_rcp.ini"="7/3/2015 1:59 PM, 92590 bytes, A
       Adds the file Portuguese_uninst.ini"="7/3/2015 1:59 PM, 2988 bytes, A
       Adds the file RegList.rcp"="7/3/2015 1:59 PM, 92920 bytes, A
       Adds the file russian_rcp_ru.ini"="7/3/2015 1:59 PM, 94932 bytes, A
       Adds the file russian_uninst_ru.ini"="7/3/2015 1:59 PM, 3252 bytes, A
       Adds the file Spanish_rcp.ini"="7/3/2015 1:59 PM, 96560 bytes, A
       Adds the file spanish_uninst.ini"="7/3/2015 1:59 PM, 3132 bytes, A
       Adds the file Swedish_rcp.ini"="7/3/2015 1:59 PM, 86868 bytes, A
       Adds the file swedish_uninst.ini"="7/3/2015 1:59 PM, 2996 bytes, A
       Adds the file TPS.ico"="7/3/2015 1:59 PM, 34494 bytes, A
       Adds the file TraditionalCn_rcp_zh-tw.ini"="7/3/2015 1:59 PM, 48496 bytes, A
       Adds the file traditionalcn_uninst_zh-tw.ini"="7/3/2015 1:59 PM, 2692 bytes, A
       Adds the file TuneupPro.exe"="11/20/2015 2:47 PM, 7634416 bytes, A
       Adds the file TuppUns.exe"="7/3/2015 1:59 PM, 542744 bytes, A
       Adds the file turkish_rcp_tr.ini"="7/3/2015 1:59 PM, 92442 bytes, A
       Adds the file Turkish_uninst_tr.ini"="7/3/2015 1:59 PM, 3098 bytes, A
       Adds the file unins000.dat"="1/15/2018 9:39 AM, 35961 bytes, A
       Adds the file unins000.exe"="1/15/2018 9:39 AM, 1196528 bytes, A
       Adds the file unins000.msg"="1/15/2018 9:39 AM, 22357 bytes, A
       Adds the file xmllite.dll"="7/3/2015 1:59 PM, 126976 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tuneup Pro
       Adds the file Register Tuneup Pro.lnk"="1/15/2018 9:39 AM, 1070 bytes, A
       Adds the file Tuneup Pro.lnk"="1/15/2018 9:39 AM, 1044 bytes, A
       Adds the file Uninstall Tuneup Pro.lnk"="1/15/2018 9:39 AM, 1039 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Tuneup Pro
       Adds the file backup6.bin"="1/15/2018 9:39 AM, 577 bytes, A
       Adds the file eng_rcp.dat"="1/15/2018 9:40 AM, 32700 bytes, A
       Adds the file log_01-15-2018.log"="1/15/2018 9:39 AM, 0 bytes, A
       Adds the file results.rcp"="1/15/2018 9:41 AM, 9644 bytes, A
    In the existing folder C:\Users\Public\Desktop
       Adds the file Tuneup Pro.lnk"="1/15/2018 9:39 AM, 1026 bytes, A
    In the existing folder C:\Windows\System32
       Adds the file roboot64.exe"="11/20/2015 2:47 PM, 19440 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file Tuneup Pro"="1/15/2018 9:40 AM, 3100 bytes, A
       Adds the file Tuneup Pro_DEFAULT"="1/15/2018 9:40 AM, 2886 bytes, A
       Adds the file Tuneup Pro_UPDATES"="1/15/2018 9:40 AM, 3042 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file Tuneup Pro_DEFAULT.job"="1/15/2018 9:40 AM, 276 bytes, A
       Adds the file Tuneup Pro_UPDATES.job"="1/15/2018 9:40 AM, 284 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "Tuneup Pro_DEFAULT.job"="REG_BINARY, ................................
       "Tuneup Pro_DEFAULT.job.fp"="REG_DWORD", -2080394519
       "Tuneup Pro_UPDATES.job"="REG_BINARY, ................................
       "Tuneup Pro_UPDATES.job.fp"="REG_DWORD", -515017080
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Tuneup Pro_is1]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe"
       "DisplayName"="REG_SZ", "Tuneup Pro"
       "DisplayVersion"="REG_SZ", "1.08"
       "EstimatedSize"="REG_DWORD", 11583
       "HelpLink"="REG_SZ", "http://www.tuneuppro.com/"
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files (x86)\Tuneup Pro"
       "Inno Setup: Icon Group"="REG_SZ", "Tuneup Pro"
       "Inno Setup: Language"="REG_SZ", "en"
       "Inno Setup: Setup Version"="REG_SZ", "5.5.1 (u)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20180115"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\Tuneup Pro\"
       "MajorVersion"="REG_DWORD", 1
       "MinorVersion"="REG_DWORD", 8
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "tuneuppro.com"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\Tuneup Pro\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\Tuneup Pro\unins000.exe" /silent"
       "URLInfoAbout"="REG_SZ", "http://www.tuneuppro.com/"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tune\up\pro\key\6]
       "(Default)"="REG_BINARY, .................................................................
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tuneup Pro]
       "Expired"="REG_DWORD", 0
       "FirstTimeASPFired"="REG_DWORD", 1
       "MaxFixLimit"="REG_DWORD", 15
       "RCPURL"="REG_SZ", "http://www.tuneuppro.com/tupp/price.asp?utm_source=site&utm_campaign=default&utm_medium=newbuild"
       "RENEWALURL"="REG_SZ", "http://www.tuneuppro.com/tupp/renewal.asp?utm_source=site&utm_campaign=default&utm_medium=newbuild"
       "ShowExitPage"="REG_DWORD", 1
       "TELNO"="REG_SZ", "(855) 973-2093"
       "utm_campaign"="REG_SZ", "default"
       "utm_medium"="REG_SZ", "newbuild"
       "utm_source"="REG_SZ", "site"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tuneup Pro\LANG]
       "LangID"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\Tune\up\pro\key\6]
       "(Default)"="REG_BINARY, ...................................................................
    [HKEY_CURRENT_USER\Software\Tuneup Pro]
       "AutoRepair"="REG_DWORD", 0
       "ConfirmBkUps"="REG_DWORD", 1
       "CurrentScanTime"="REG_BINARY, .....)&.
       "ErrorCount"="REG_DWORD", 24
       "FirstRun"="REG_DWORD", 1
       "GoToSystemTrayOnClose"="REG_DWORD", 0
       "ImprovementProgram"="REG_DWORD", 1
       "NumTimesRCPRunned"="REG_DWORD", 1
       "RegErrFoundTillDate"="REG_DWORD", 0
       "RegErrsFixedLast"="REG_DWORD", 0
       "RegErrsFixedTillDate"="REG_DWORD", 0
       "ScheduledTime"="REG_SZ", ""
       "SetChkDontShowRedTrayPopup"="REG_DWORD", 0
       "SetChkREmovableMedia"="REG_DWORD", 1
       "SetChkSkipEmptyKeys"="REG_DWORD", 1
       "SetEnableSound"="REG_DWORD", 1
       "StartAutoScanOnLaunch"="REG_DWORD", 0
       "StartAutoScanPMUI"="REG_DWORD", 0
       "StartAutoTutorial"="REG_DWORD", 1
       "StartMinimized"="REG_DWORD", 0
       "StartScan"="REG_DWORD", 0
       "StartWhenWinBoots"="REG_DWORD", 1
       "StrLastOptimizeTime"="REG_SZ", ""
       "StrLastScan"="REG_SZ", "Mon. January 15, 2018. 09:41 AM"
       "StrLastScanResults"="REG_SZ", "24"
       "StrLastStartupOpt"="REG_SZ", ""
       "StrLatestRegDefrag"="REG_SZ", ""
       "StrLatestRestorePoint"="REG_SZ", ""
       "TrialType"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\Tuneup Pro\LANG]
       "LangCode"="REG_SZ", "en"
       "LangID"="REG_DWORD", 0
Malwarebytes log:
 
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 1/15/18
Scan Time: 9:48 AM
Log File: ea77a260-f9d0-11e7-bc15-080027750297.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.262
Update Package Version: 1.0.3698
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 240993
Threats Detected: 86
Threats Quarantined: 85
Time Elapsed: 6 min, 24 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe, Quarantined, [701], [478972],1.0.3698

Module: 3
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\isxdl.dll, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\xmllite.dll, Quarantined, [701], [478972],1.0.3698

Registry Key: 14
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Tuneup Pro, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{4967A038-BB35-4F2B-8837-385BB62B2C53}, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{4967A038-BB35-4F2B-8837-385BB62B2C53}, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Tuneup Pro_DEFAULT, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{ACDFF398-EFBF-4838-9D65-DE5339FC203F}, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{ACDFF398-EFBF-4838-9D65-DE5339FC203F}, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Tuneup Pro_UPDATES, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{20E84FB8-3016-43EC-B53A-0FB1CE6DB57A}, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{20E84FB8-3016-43EC-B53A-0FB1CE6DB57A}, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Tuneup Pro_is1, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\WOW6432NODE\Tuneup Pro, Quarantined, [701], [478983],1.0.3698
PUP.Optional.TuneupPro, HKCU\SOFTWARE\Tuneup Pro, Quarantined, [701], [478985],1.0.3698
PUP.Optional.TuneupPro, HKCU\SOFTWARE\TUNE\up, Quarantined, [701], [478984],1.0.3698
PUP.Optional.TuneupPro, HKLM\SOFTWARE\WOW6432NODE\TUNE\up, Quarantined, [701], [478982],1.0.3698

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.TuneupPro, C:\PROGRAM FILES (X86)\TUNEUP PRO, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\TUNEUP PRO, Quarantined, [701], [478973],1.0.3698
PUP.Optional.TuneupPro, C:\USERS\{username}\APPDATA\ROAMING\TUNEUP PRO, Removal Failed, [701], [478975],1.0.3698

File: 65
PUP.Optional.SysTweak, C:\WINDOWS\SYSTEM32\ROBOOT64.EXE, Quarantined, [210], [395666],1.0.3698
PUP.Optional.TuneupPro, C:\USERS\PUBLIC\DESKTOP\TUNEUP PRO.LNK, Quarantined, [701], [478974],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\FileList.rcp, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\isxdl.dll, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\RegList.rcp, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Chinese_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Chinese_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\CleanSchedule.exe, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Danish_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Danish_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Dutch_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Dutch_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\eng_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\eng_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Italian_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Italian_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Japanese_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Japanese_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\korean_rcp_ko.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\korean_uninst_ko.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Norwegian_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Norwegian_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\polish_rcp_pl.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\polish_uninst_pl.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\portugese_rcp_pt.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\portugese_uninst_pt.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Portuguese_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Portuguese_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Finnish_rcp_fi.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Finnish_uninst_fi.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\French_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\French_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\German_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\German_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\greek_rcp_el.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\greek_uninst_el.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\install_left_image.bmp, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\russian_rcp_ru.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\russian_uninst_ru.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Spanish_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\spanish_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Swedish_rcp.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\swedish_uninst.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\TPS.ico, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\TraditionalCn_rcp_zh-tw.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\traditionalcn_uninst_zh-tw.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\TuneupPro.exe, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\TuppUns.exe, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\turkish_rcp_tr.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\Turkish_uninst_tr.ini, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\unins000.dat, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\unins000.exe, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\unins000.msg, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\Program Files (x86)\Tuneup Pro\xmllite.dll, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\WINDOWS\SYSTEM32\TASKS\Tuneup Pro, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\WINDOWS\SYSTEM32\TASKS\Tuneup Pro_DEFAULT, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\WINDOWS\SYSTEM32\TASKS\Tuneup Pro_UPDATES, Quarantined, [701], [478972],1.0.3698
PUP.Optional.TuneupPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tuneup Pro\Register Tuneup Pro.lnk, Quarantined, [701], [478973],1.0.3698
PUP.Optional.TuneupPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tuneup Pro\Tuneup Pro.lnk, Quarantined, [701], [478973],1.0.3698
PUP.Optional.TuneupPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tuneup Pro\Uninstall Tuneup Pro.lnk, Quarantined, [701], [478973],1.0.3698
PUP.Optional.TuneupPro, C:\Users\{username}\AppData\Roaming\Tuneup Pro\backup6.bin, Quarantined, [701], [478975],1.0.3698
PUP.Optional.TuneupPro, C:\Users\{username}\AppData\Roaming\Tuneup Pro\eng_rcp.dat, Quarantined, [701], [478975],1.0.3698
PUP.Optional.TuneupPro, C:\Users\{username}\AppData\Roaming\Tuneup Pro\log_01-15-2018.log, Quarantined, [701], [478975],1.0.3698
PUP.Optional.TuneupPro, C:\Users\{username}\AppData\Roaming\Tuneup Pro\results.rcp, Quarantined, [701], [478975],1.0.3698
PUP.Optional.AdvancedSystemProtector, C:\USERS\{username}\DESKTOP\TUPPSETUP_SITE_DEFAULT.EXE, Quarantined, [234], [326827],1.0.3698

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.