Should I remove “PUP.Optional.BMMedia”?

The PUP.Optional.BMMedia is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.BMMedia virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family

How to determine PUP.Optional.BMMedia?


File Info:
name: 63ACE7932AD17EC3D5F5.mlw
path: /opt/CAPEv2/storage/binaries/a6bf21e1a15a1a84f528db8ee99e72fa11fe1f9d5b51412f11555c16af1f5680
crc32: B0A4507E
md5: 63ace7932ad17ec3d5f525810286d918
sha1: 8b10620f29ddcb88cc136352cc57835e6584076b
sha256: a6bf21e1a15a1a84f528db8ee99e72fa11fe1f9d5b51412f11555c16af1f5680
sha512: 43cc2da25e17d1e7bd6a849df3543bd5c0aa34448f43cb703a81ad60c4d2aa00b2849a13e5f1950f58c29afd8c613d36f2faa08deb6f64f87891959e741d6a81
ssdeep: 49152:zXSidT45mbrZ+ZkSR+JFsAD4GTZ2wP14IRCMkLmhedC1Wqp/tVkF6z9PHIBhmTuP:zfwmbrNJFslGF2wP1Z4LmheeHtGF6z9+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FDA59F12FBC08171E5D251BA52BE57BF4D39A631033992C3E3902D656DB06D2BB3D38A
sha3_384: 8d177e95ed72f9b6351f7f844c41d0b3fb1057c9e6520fc6de5ae3c51002694cdc2d346c77ee401a6b5ba9de4818435f
ep_bytes: e89f480100e989feffff8bff558bec51
timestamp: 2013-09-20 10:30:02

Version Info:
0: [No Data]

PUP.Optional.BMMedia also known as:

Bkav	W32.Common.DBBB4B14
DrWeb	Trojan.Skymoner.2
CAT-QuickHeal	PUA.Ooolegamed.Gen
Skyhigh	Artemis!Trojan
Malwarebytes	PUP.Optional.BMMedia
Google	Detected
Emsisoft	Application.AdMedia (A)
Varist	W32/ABAdware.SSIR-1655
Antiy-AVL	GrayWare[AdWare]/Win32.DownloadAdmin
Microsoft	PUADlManager:Win32/DownloadAdmin
McAfee	Artemis!63ACE7932AD1
VBA32	BScope.Trojan.Skymoner
Cylance	unsafe
Rising	Adware.DownloadAdmin!8.13286 (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove PUP.Optional.BMMedia?

PUP.Optional.BMMedia removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X