PUA

PUP.Optional.InstallMonetizer removal instruction

Malware Removal

The PUP.Optional.InstallMonetizer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.InstallMonetizer virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Checks for the presence of known windows from debuggers and forensic tools
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Detects VirtualBox through the presence of a registry key

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.ntdlzone.com
survey-smiles.com

How to determine PUP.Optional.InstallMonetizer?


File Info:

crc32: EA293C3A
md5: 414812705d0150bc1af2a594cc9c9087
name: 414812705D0150BC1AF2A594CC9C9087.mlw
sha1: 96e79178162462dae055b68688e5a658554c3c4a
sha256: 9fff85e5d56b76c9f87b32bf66de43bd52ce5176543382ca39c0885562752eed
sha512: 3f3157567cd20e52b8eedcc78ea6e56e8fd54a65a05f0d9c18c7f4c7762f166b2c339bd431513284cd17ee4d729ba73074bea99f1c56710f361ae01abb3337a6
ssdeep: 98304:WrvcH8bsXn9MrWItTspnk4Dss3Ym/EHgIp:mb8MrBspnkjhHHhp
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: www.FreeLiveTVSoftware.com
FileVersion: 9.2
CompanyName: www.FreeLiveTVSoftware.com
Comments: This installation was built with Inno Setup.
ProductName: Stream Live TV
ProductVersion: 9.2
FileDescription: Stream Live TV Setup
Translation: 0x0000 0x04b0

PUP.Optional.InstallMonetizer also known as:

CylanceUnsafe
ZillyaAdware.BrowseFox.Win32.184908
ESET-NOD32Win32/InstallMonetizer.AF potentially unwanted
NANO-AntivirusRiskware.InnoSetup.Amonetize.ebzqbs
MicrosoftTrojan:Win32/Occamy.C
MalwarebytesPUP.Optional.InstallMonetizer

How to remove PUP.Optional.InstallMonetizer?

PUP.Optional.InstallMonetizer removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment