Jump to content

PUP.Optional.PushNotifications


Raven1645
 Share

Recommended Posts

Malwarebytes keeps flagging this as potentially unwanted program, even after reinstalling chrome and disabling all extensions and having zero sites with notifications active.

 

Folder: 4
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 217, 791016, , , , 

File: 10
PUP.Optional.PushNotifications, C:\Users\raaf0\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000004.log, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\Users\raaf0\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\Users\raaf0\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\Users\raaf0\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\Users\raaf0\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\Users\raaf0\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, No Action By User, 217, 791016, , , , 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 217, 791016, 1.0.19252, , ame, 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 217, 791016, 1.0.19252, , ame, 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 217, 791016, 1.0.19252, , ame, 
PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, No Action By User, 217, 791016, 1.0.19252, , ame, 

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Link to post
Share on other sites

1 minute ago, Raven1645 said:

Malwarebytes keeps flagging this as potentially unwanted program, even after reinstalling chrome and disabling all extensions and having zero sites with notifications active.

 

Please try following the instructions in this topic to see if it helps.  If the issue still persists after that then please read and follow the instructions in this topic and then create a new topic in our malware removal area by clicking here and one of our malware removal specialists will assist you in checking and clearing the system of any remaining threats.

Please let us know how it goes.

Thanks

Link to post
Share on other sites

This morning MWB notified me of the exact same thing out of nowhere, PUP.Optional.PushNotifications in Chrome. Are we sure this isn't some kind of false positive, or has a recent update changed something about detection? Seems a bit of a coincidence that we both get that suddenly in the last 24 hours.

Can someone explain what exactly that detection is about? Is it simply that you have enabled push notifications for some sites in chrome and now MBW is treating that as a PUP?

Link to post
Share on other sites

25 minutes ago, Substr said:

This morning MWB notified me of the exact same thing out of nowhere, PUP.Optional.PushNotifications in Chrome. Are we sure this isn't some kind of false positive, or has a recent update changed something about detection? Seems a bit of a coincidence that we both get that suddenly in the last 24 hours.

Can someone explain what exactly that detection is about? Is it simply that you have enabled push notifications for some sites in chrome and now MBW is treating that as a PUP?

I agree that something must be wrong. I saved the page about doing the Chrome sync in case I need to, but it's a long process for something that was never a problem before. Even 24 hours ago, the same files and folders (all the Chrome Push Notifications) did not come up as PUPs. Today, I went ahead and quarantined the 25 from the 1st scan, and then tonights scan showed another 15 which were likely from the same batch as previously quarantined. It seems the problem is likely with the new MB and not that Chrome notifications are suddenly dangerous.

Link to post
Share on other sites

  • Staff

That is it. But we actually found one bad rule that will be fixed in the next update that was too aggressive.

If you have one like this

 

PUP.Optional.PushNotifications, C:\USERS\RAAF0\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 217, 791016

ruleid 791016 you can add to the ignore list for now. Update should be out in about an hour from now.

Link to post
Share on other sites

I'm personally glad to see Malwarebytes targeting push notifications as it is one of the most frequently exploited features by many scams, PUPs and malware families these days.

Also, for anyone who wishes to understand better why Malwarebytes has chosen to detect push notifications as PUP (Potentially Unwanted Programs) please refer to the following Malwarebytes articles and resources:

Browser push notifications: a feature asking to be abused
Adware and PUPs families add push notifications as an attack vector
Adposhel adware takes over browser push notifications administration
PUP.Optional.PushNotifications

Link to post
Share on other sites

  • 4 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.