PUP.Optional.Blaze removal instruction

The PUP.Optional.Blaze is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.Blaze virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Traditional)

How to determine PUP.Optional.Blaze?


File Info:
name: 73AA022892DB858E68E7.mlw
path: /opt/CAPEv2/storage/binaries/0cf4688a8aac2ce083f4ba3542f3de64796041a471a3c41430ba219632cb1eab
crc32: 2C8C1454
md5: 73aa022892db858e68e75d009fbc774f
sha1: 9b3daf5e00c737f3fa9da993c2dc20750e90563f
sha256: 0cf4688a8aac2ce083f4ba3542f3de64796041a471a3c41430ba219632cb1eab
sha512: 639516c9bce12798ebb4cbff258a1e6ad55ce978f90204aeb29f63387231488e5869b7f3a687c5e89a74d51638d821233d71d5daee8d1b937b0e7d7dcc52ee65
ssdeep: 384:PDQT9GBQhZkZsHLgnnvkZsHLYVGST1hkDS:P8mQhrUduGShhkDS
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A413863586404C49EB267A3131E48E3F9A3371C16AD0F3976188F434DAB17527ABEE6D
sha3_384: c1e59df69f9eb49c45afd9c37e6862ecf9bf3f90fffd34a54f34a7c046eceee2e5fd976b5c4f790a397e0942272ff8f0
ep_bytes: 558bec837d0c017509ff7508ff150030
timestamp: 2021-09-06 01:00:47

Version Info:
CompanyName: Blaze Media LLC.
FileDescription: BlazeMedia Update Resource DLL
FileVersion: 1.3.105.0
InternalName: BlazeMedia Update Resource DLL
OriginalFilename: goopdateres_zh-TW.dll
ProductName: BlazeMedia Update
ProductVersion: 1.3.105.0
LanguageId: zh-TW
PrivateBuild: 
Translation: 0x0404 0x03b6

PUP.Optional.Blaze also known as:

Bkav	W32.Common.4E599EF2
Lionic	Adware.Win32.SecureBrowser.2!c
Elastic	malicious (high confidence)
Skyhigh	Artemis
McAfee	Artemis!73AA022892DB
Cylance	unsafe
Alibaba	AdWare:Win32/BlazeMedia.f75fe73b
Symantec	PUA.Gen.2
ESET-NOD32	a variant of MSIL/Adware.BrowserAssistant.T
Kaspersky	not-a-virus:HEUR:AdWare.OLE2.SecureBrowser.gen
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Avast	Win32:UnwantedSig [PUP]
Sophos	Blaze Media (PUA)
Ikarus	PUA.BlazeMedia
ZoneAlarm	not-a-virus:HEUR:AdWare.OLE2.SecureBrowser.gen
Malwarebytes	PUP.Optional.Blaze
Panda	PUP/SecureBrowser
TrendMicro-HouseCall	TROJ_GEN.R002H07CQ22
Rising	Adware.SecureBrowser!8.14320 (CLOUD)
MaxSecure	Trojan.Malware.140812065.susgen
Fortinet	Riskware/BlazeMedia
AVG	Win32:UnwantedSig [PUP]
DeepInstinct	MALICIOUS

How to remove PUP.Optional.Blaze?

PUP.Optional.Blaze removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X