How to remove “PUP.Optional.MediaArena”?

The PUP.Optional.MediaArena is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.MediaArena virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine PUP.Optional.MediaArena?


File Info:
name: 06FBB1ED1F6D148006B1.mlw
path: /opt/CAPEv2/storage/binaries/76352e58036822fee932df67e1ad90a0cfaf39ec38b2c9e8da7325da71cf3376
crc32: 1BF96339
md5: 06fbb1ed1f6d148006b10d67953eb5d0
sha1: 321f722c753113f0c9f22a4d9fd07093e9068c3d
sha256: 76352e58036822fee932df67e1ad90a0cfaf39ec38b2c9e8da7325da71cf3376
sha512: ca7d555062d640feef1052444bac02398d38f860378c8323ebd9126c1ce36bb6b00e63f1ce8d77213753a10263d83cf642edf5c12232a0e9631cd33564666f36
ssdeep: 24576:GbWJwmGQ/0vovXvMD82Gbp/GYMeCbR+PAOh//0vovXvMD82Gbp/GYMeCbR+PAOhs:JT7pqZsT7pqZxDDoRK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T195C5F27647295E06C15D067BA03C4F0F7AF8C84FA6C6B76F7828A2BEA8D57104D850E7
sha3_384: 24067744e978df0369c510f1fd3cb3a9422a1a7f5808e39ec927afc6e38f2fab8b53d4b80368418bca054eaf3fd0e126
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-27 11:05:47

Version Info:
Translation: 0x0000 0x04b0
Comments: EDUp
CompanyName: 
FileDescription: 
FileVersion: 1.0.8
InternalName: ImpFix.exe
LegalCopyright: Copyright ©  2024
LegalTrademarks: 
OriginalFilename: ImpFix.exe
ProductName: 
ProductVersion: 1.0.8
Assembly Version: 1.0.8.0

PUP.Optional.MediaArena also known as:

Lionic	Adware.Win32.MediaArena.2!c
AVG	Win32:Malware-gen
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.477521
FireEye	Generic.mg.06fbb1ed1f6d1480
Skyhigh	Artemis
McAfee	Artemis!06FBB1ED1F6D
Cylance	unsafe
Sangfor	Adware.Win32.Mediaarena.V8e2
K7AntiVirus	Adware ( 005af4c61 )
K7GW	Adware ( 005af4c61 )
CrowdStrike	win/malicious_confidence_70% (D)
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/MediaArena.I potentially unwanted
BitDefender	Gen:Variant.Lazy.477521
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Lazy.477521 (B)
DrWeb	Adware.Linkury.150
VIPRE	Gen:Variant.Lazy.477521
Sophos	Generic Reputation PUA (PUA)
Ikarus	PUA.MediaArena
GData	Gen:Variant.Lazy.477521
Arcabit	Trojan.Lazy.D74951
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Lazy.477521
MAX	malware (ai score=82)
Malwarebytes	PUP.Optional.MediaArena
Rising	PUA.MediaArena!8.17AFC (CLOUD)
SentinelOne	Static AI – Suspicious PE
Fortinet	Adware/MediaArena
DeepInstinct	MALICIOUS

How to remove PUP.Optional.MediaArena?

PUP.Optional.MediaArena removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X