How to remove “PUP.Optional.MediaArena”?

The PUP.Optional.MediaArena is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.MediaArena virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine PUP.Optional.MediaArena?


File Info:
name: 491F8AC120D1FBDD5892.mlw
path: /opt/CAPEv2/storage/binaries/1b5cfb3ffebe2650204f0bc59dec238b75e2cf86bee3b6d70bdfb33918fa86ca
crc32: 99D1FE33
md5: 491f8ac120d1fbdd5892956a6ce289d7
sha1: 2f190b9ead3f3d61645a17adf25b790f5339ddff
sha256: 1b5cfb3ffebe2650204f0bc59dec238b75e2cf86bee3b6d70bdfb33918fa86ca
sha512: 30de6f2fd89319f2eeef2284c5279029876c5003683f0a32faec8a58d6c23b52289a5e9c913afebf676d4e22226c5f957be97fc11caf5652c05c07fb0dec056c
ssdeep: 24576:4bWJwmGQ/0vovXvMD82Gbp/GYMeCbR+PAOh//0vovXvMD82Gbp/GYMeCbR+PAOhb:DT7pqZsT7pqZYDDoRw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C7C5F27647295E06C15D067BA03C4F0F7AF8C84FA6C6B76F7828A2BEA8D57104D850E7
sha3_384: c51a68955ac36a5a4550f7825aa591f360d1c5e31fb7a972bc1168bf2915143a60bad8259601f2de7244c666a54ae5e2
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-27 11:05:47

Version Info:
Translation: 0x0000 0x04b0
Comments: EDUp
CompanyName: 
FileDescription: 
FileVersion: 1.0.8
InternalName: ImpFix.exe
LegalCopyright: Copyright ©  2024
LegalTrademarks: 
OriginalFilename: ImpFix.exe
ProductName: 
ProductVersion: 1.0.8
Assembly Version: 1.0.8.0

PUP.Optional.MediaArena also known as:

Bkav	W32.Common.1A4825C0
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.477521
Malwarebytes	PUP.Optional.MediaArena
K7AntiVirus	Adware ( 005af4c61 )
K7GW	Adware ( 005af4c61 )
Cybereason	malicious.ead3f3
VirIT	Trojan.Win32.MSIL_Heur.A
ESET-NOD32	a variant of MSIL/MediaArena.I potentially unwanted
BitDefender	Gen:Variant.Lazy.477521
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Lazy.477521 (B)
DrWeb	Adware.Linkury.150
VIPRE	Gen:Variant.Lazy.477521
FireEye	Gen:Variant.Lazy.477521
Google	Detected
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Lazy.D74951
GData	Gen:Variant.Lazy.477521
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Lazy.477521
MAX	malware (ai score=87)
Ikarus	PUA.MediaArena
MaxSecure	Trojan.W32.MSIL.Agent.gen_359418
Fortinet	PossibleThreat.PALLAS.M
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)

How to remove PUP.Optional.MediaArena?

PUP.Optional.MediaArena removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X