PUP.Optional.Legacy

[Wittmann]

Windows 10 - version 1909

 

I did a scan with Adwcleaner and found one infection - PUP.Optional.Legacy.

It was quarantined and checked for delete, which included a restart.

I carried out a Chrome sync reset, in case the server Bookmarks data was the culprit and then did a PC restart.

 

On restart I did another Adwcleaner scan and PUP.Optional.Legacy was still there !

 

In the Adwcleaner cleaned logs it showed that - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Blackjack +.lnk - had been deleted.

I entered %ProgramData% in a Run control, followed the path until Blackjack was listed, right clicked it and clicked Delete - result Blackjack is now gone !

 

A further scan with  Adwcleaner showed no infection by PUP.Optional.Legacy - it has GONE ! Blackjack was the offender.

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.
In order to help us assist you to resolve your issue, please post or attach your latest AdwCleaner log files with your post. https://support.malwarebytes.com/hc/en-us/articles/360039021593

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

• Malwarebytes AdwCleaner guide
• A malicious element isn't being detected? Submit the sample here!
• Need help with another Malwarebytes product or malware removal?
  • Click here for home support
  • Click here for business support
  • Click here for malware removal help

Thanks in advance for your patience.

-The Malwarebytes Forum Team

 

 

 

 

[exile360]

Greetings,

Thanks for reporting this.  Could you please post the scan log from ADWCleaner showing the detection?  The Developers may need it to investigate the issue with the failed remediation.

Thanks

[Wittmann]

47 minutes ago, exile360 said:

Greetings,

Thanks for reporting this.  Could you please post the scan log from ADWCleaner showing the detection?  The Developers may need it to investigate the issue with the failed remediation.

Thanks

The Touch VPN - I myself uninstalled the extension, but Adwcleaner did remove it - only PUP.Optional.Legacy was found on re-scan.

Here is the log you asked for - PUP.Optional.Legacy would not delete until I deleted the blackjack file - kept coming back -

======= LOG

# -------------------------------
# Malwarebytes AdwCleaner 8.0.7.0
# -------------------------------
# Build:    07-22-2020
# Database: 2020-07-20.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    10-01-2020
# Duration: 00:00:10
# OS:       Windows 10 Home
# Cleaned:  2
# Failed:   0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Blackjack +.lnk

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Deleted       Touch VPN - Secure and unlimited VPN proxy - bihmplhobchoageeokmgbdihknkjbknd

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5513 octets] - [30/09/2020 23:38:57]
AdwCleaner[C00].txt - [1706 octets] - [30/09/2020 23:40:41]
AdwCleaner[S01].txt - [5562 octets] - [01/10/2020 00:24:40]
AdwCleaner[S02].txt - [5696 octets] - [01/10/2020 00:36:36]
AdwCleaner[S03].txt - [5757 octets] - [01/10/2020 01:04:38]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########