PUA

Should I remove “PUP.Optional.DownloadHelper”?

Malware Removal

The PUP.Optional.DownloadHelper is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.DownloadHelper virus can do?

  • Presents an Authenticode digital signature
  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • Network activity detected but not expressed in API logs

How to determine PUP.Optional.DownloadHelper?


File Info:

crc32: 9B0EF213
md5: 0721717c6e57aa659fbdf534ce0ebc72
name: 0721717C6E57AA659FBDF534CE0EBC72.mlw
sha1: 83ed45524598cb69ccc3da95d463a5b28bb7d8ff
sha256: f91f9524f799b7133be927b3c44a933efd918b3c0463e96380ce020128052540
sha512: 5710adcc33e98a696e7994528d643acbca0918f7b07dbaeb4ca7ae1c4fb3055606876a0957dd49ee752e7f172422f3b1b997b78944e0a277fb723772a358562a
ssdeep: 49152:kCuOhUS769rZ87y6WJFZ9BWTqyi05V4cOEKY:kC5FT7y6ED9BW/Qc/KY
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

PUP.Optional.DownloadHelper also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Zadved.165
MicroWorld-eScanGen:Variant.Application.Strictor.95471
CAT-QuickHealTrojan.Wacapew
ALYacGen:Variant.Application.Strictor.95471
CylanceUnsafe
VIPRETrojan-Downloader.Win32.Agent
SangforMalware
K7AntiVirusTrojan ( 004cd71c1 )
BitDefenderGen:Variant.Application.Strictor.95471
K7GWTrojan ( 004cd71c1 )
Cybereasonmalicious.c6e57a
CyrenW32/Downware.G.gen!Eldorado
SymantecDownloader
APEXMalicious
AvastWin32:Adware-gen [Adw]
ClamAVWin.Trojan.Agent-1332264
Kasperskynot-a-virus:Downloader.Win32.Agent.ebsr
NANO-AntivirusTrojan.Win32.DownloadHelper.dwzbcg
AegisLabRiskware.Win32.Agent.1!c
RisingMalware.Dlhelper!8.E98A (TFE:5:ZW9b35Jy7TI)
Ad-AwareGen:Variant.Application.Strictor.95471
EmsisoftApplication.AdLoad (A)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
ZillyaDownloader.DownloadHelperCRTD.Win32.5617
McAfee-GW-EditionPUP-XIQ-UW
FireEyeGeneric.mg.0721717c6e57aa65
SophosMal/Generic-S
Ikarusnot-a-virus:Downloader.Agent
JiangminDownloader.Agent.ht
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLRiskWare[Downloader]/Win32.DownloadHelper
MicrosoftSoftwareBundler:Win32/Dlhelper
ArcabitTrojan.Application.Strictor.D174EF
ZoneAlarmnot-a-virus:Downloader.Win32.Agent.ebsr
GDataGen:Variant.Application.Strictor.95471
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.Agent.C979922
Acronissuspicious
McAfeePUP-XIQ-UW
MAXmalware (ai score=78)
VBA32Malware-Cryptor.TDSS
MalwarebytesPUP.Optional.DownloadHelper
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.DTYF
TencentMalware.Win32.Gencirc.10b2f9f7
YandexTrojan.GenAsa!yBkapr7sgW0
SentinelOneStatic AI – Malicious PE – Adware
eGambitUnsafe.AI_Score_99%
FortinetW32/Generic.AP.1D826!tr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Virus.Downloader.e74

How to remove PUP.Optional.DownloadHelper?

PUP.Optional.DownloadHelper removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment