PUP.Optional.Legacy

[gingersitka]

Above article is as far as I can tell a clone copy of what I experienced as of February 1, 2019 This post was solved December 12, 2016 by Staff member "AdvancedSetup" (RootAdmin)

-I installed Auslogics Disk Defrag, and Registry Cleaner as of Jan 31, 2019 because computer was running slow. I usually use CCleaner from Piriform to clean temporary internet files, and loose temp files created through running windows and other programs. 

-Try to stay clear of downloading a bunch of junk freeware, and a bundled software. I have developed into a semi-conscious computer savvy user over the last 10 years and have learned a lot. I have read the entire topic thread above, but still have a few questions??

-If this post was solved in 2016 and pretty much determined to be a "false positive" why is it still being detected? it is a Registry key associated with Auslogics Disk Defrag. Auslogics Disk Defrag https://www.auslogics.com/en/software/disk-defrag/    seems to be a solid freeware defragmenting application, its rated as one of the top disk defragmenters on multiple websites. https://www.thepcinsider.com/best-free-defrag-software-windows/  (NOT ALL FREEWARE IS JUNK)

https://blog.malwarebytes.com/detections/PUP.Optional.Legacy/?x-source=adw&ADDITIONAL_x-source=adw  

THE ABOVE LINK STATES: PUP.Optional.Legacy is a generic detection for PUP (not part of family detection)

- ?? Is this Registry Key a PUP and Need to be removed?  And if I remove it what will happen will Auslogic, will it become inoperable? Or is it a FALSE POSITIVE?

PUP.Optional.Legacy   HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1

Tried getting Bitdefender Logfile but seems illogical for me https://www.bitdefender.com/support/how-to-retrieve-the-system-scan-log-of-bitdefender-virus-scanner-1448.html

NOTE: I DID NOT REMOVE FILE WITH ADWCLEANER, I DID NOT FOLLOW ANY STEPS IN THE ORIGINAL ARTICLE BECAUSE MY BELIEF OF FALSE POSITIVE.

Attached to this Service Request is a couple log files and some screenshots (THE ONLY SYMPTOMS I HAVE UNUSUAL IS WEBSITES WITH CERTFICATE PROBLEMS) SEE SCREENSHOTS

I HAVE EMAILED Fandom Support @  support@wikia.zendesk.com> about this today haven't received reply yet.

- have scanned computer with (Malwarebytes antimalware, Bitdefender, Malwarebytes adware cleaner) No detections today as of 2/1/2019 on 1/30/2019 Malwarebytes Antimalware detected and Quarantined 1 file in my Recycle bin I deleted out of my downloads folder don't believe I ever ran/installed the program don't know what program it was.

-Still getting these weird Certificate Errors though on Screenshot Websites; don't know if its a browser problem, but it happens on google chrome and Microsoft Edge. Its not on the exact same website every time either according to URL: Right now 2/1/2019 8:30PM https://www.nexusmods.com/    is working fine but https://forums.nexusmods.com/     is not and is showing RED URL BAR with Certificate Error

If I Copy link and paste into Google Chrome URL Bar it does the same thing. RED with Certificate Error Messages. 

https://www.wikia.com/explore   is not  RED -             (this is the main page)

https://reddead.fandom.com/wiki/Red_Dead_Wiki         Red (subpage)

https://www.fandom.com/   (RED SUBPAGE)

https://www.fandom.com/topics/games  (RED SUBPAGE)

https://destiny.fandom.com/wiki/Destiny_Wiki  (RED SUBPAGE)

 

AdwCleaner[S00].txt

malwarebytes_ThreatScan_Feb_1_2019.txt

Malwarebytes_Adware.InstallCore.txt

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

• AdwCleaner user guide
• A malicious element isn't being detected? Submit the sample here!
• Need help with another Malwarebytes product or malware removal?
  • Click here for home support
  • Click here for business support
  • Click here for malware removal help

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[gingersitka]

Okay well if no one is going to respond, then I guess Ill try and figure it out. Feel free to post anything helpful at your own will. I guess I'll have to research how certificates work, that seems to be the only issue, never had a problem like this before. I've visited bad sites that internet explorer or antivirus blocked and turned red warning me of a bad Certificate, Malware detected on site and so forth. But Never on legitimate hosting websites. Especially since I've been pretty careful with my new laptop haven't visited any bad websites that I can remember. Like I said in my previous post above I download some programs I like to try out every now and then but before I download or install I do research, read reviews, and scan with multiple sources, Virustotal website, and files unless there big programs, and always scan with system antivirus/antimalware before executing program. This was basically a fresh install of Windows 10 64bit;     (All info below was copy and pasted from a BelarcAdvisor Report Generated on 2/5/2019

  installed Windows 10 Home (x64) Version 1803 (build 17134.523)//
                 Install Language: English (United States)
                 System Locale: English (United States)
                Installed: 12/4/2018 5:43:29 PM
                Servicing Branch: Current Branch (CB)
                Boot Mode: UEFI with successful Secure Boot

Virus Protection [Back to Top] 
Malwarebytes Anti-Malware Version 3.6.1.2711
    Virus Definitions Version Up To Date
    Last Disk Scan on Saturday, February 2, 2019 3:50:28 AM
    Realtime File Scanning Off
Bitdefender Antivirus Free Antimalware
    Virus Definitions Version Up To Date
    Realtime File Scanning On

[jboursier]

Hello,

Sorry for the delay.

If I understood your post well, you're asking:

1. Whether or not Auslogic detection is legit or if it should not be detected anymore?

Yes, the detection is legit but you're free to add it to your exclusions if you really like DiskDefrag. To do so, simply right-click on the detection line > Add to exclusions.

2. The cause of the certificate errors?

They're coming from BitDefender. Please refer to the `Security software playing nasty` part of this article: https://blog.malwarebytes.com/security-world/2017/06/https-everywhere/

The only solution would be to either uninstall completely BitDefender, or to disable the web part of it if it's feasible.

Regards,

[gingersitka]

Thanks for the reply @Fr33tux read your post and information contained, man the website security protocols need to be standardized or something, too confusing and can cause panic for a normal user. Well I don't know whether to blame Hackers, Web developers, Security software developers, or browsers. 

1.  Auslogic Disk Defrag ( I'll keep it until it gives me gripe, I like it so far, it has an occasional add come on my computer that I ignore
2. Bitdefender Free (Might uninstall so I don't have to be continually harassed and confused by which warnings to take lightly or which are serious threats (if every website is flagged as a threat there's no point)
   1.  Reason for Bitdefender was light on system resources and very good antimalware engine.
   2.  No way to just disable WEB scanning it's all built into one on/off Realtime protection, only way to bypass would be through Exclusion filtering (not feasible)
   3.  Might switch to AVAST, AVG, or back to Windows Defender with Malwarebytes PRO

[jboursier]

On 2/9/2019 at 5:37 PM, gingersitka said:

Well I don't know whether to blame Hackers, Web developers, Security software developers, or browsers. 

I agree with you on that :)

Regards,

[gingersitka]

1.  UPDATE: Uninstalled Bitdefender and installed AVG problem has been resolved (No more false Certificate errors)
2. Going to report this issue to bitdefender

THANK YOU FOR ALL THE HELP!!!