PUA

PUP.Optional.AdvancedSystemCare information

Malware Removal

The PUP.Optional.AdvancedSystemCare is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.AdvancedSystemCare virus can do?

  • At least one process apparently crashed during execution
  • Executable code extraction
  • Attempts to connect to a dead IP:Port (3 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file

Related domains:

update.iobit.com
redirector.gvt1.com
r3—sn-4g5edn7y.gvt1.com

How to determine PUP.Optional.AdvancedSystemCare?


File Info:

crc32: 71EBAA9A
md5: 5df8dc9259eaddce2134c8f286cc3e71
name: asc11pro_v678.exe
sha1: 3dcf3f667839f23533b1f855b32df563c5620d14
sha256: 5b62cce892867a6f3ff8aff9241a645dcc547d4ddf37e6336778c9f01fe0c698
sha512: 3d870388ddd9cd69a0ada36321b298ee6259761fc230a9404d7f4ff7ff445fad97dbdf8c5741cabdd6b724a0c2e1b8ca976e80899e06a73ae12271e7660e0f93
ssdeep: 24576:NL+mTKzH6DegrsdCutMn/rktnodo2EgJ2/lO0MUCitxPnE/KYSdajWLKTXq0X+Fg:NLP2H65rSPOTktn02gildMnMxgKYSd0f
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright xa9 2005-2017 IObit. All Rights Reserved.
InternalName:
FileVersion: 11.0.4.1103
CompanyName: IObit
LegalTrademarks: IObit
Comments:
ProductName: Advanced SystemCare 11
ProductVersion: 11.0.0.0
FileDescription: Advanced SystemCare Installer
OriginalFilename:
Translation: 0x0409 0x04e4

PUP.Optional.AdvancedSystemCare also known as:

GDataWin32.Adware.iObit.A
DrWebProgram.Unwanted.1183
MalwarebytesPUP.Optional.AdvancedSystemCare
ESET-NOD32a variant of Win32/IObit.G potentially unwanted
eGambitUnsafe.AI_Score_69%
WebrootW32.Malware.Gen

How to remove PUP.Optional.AdvancedSystemCare?

PUP.Optional.AdvancedSystemCare removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment