Categories: PUA

PUP.Optional.OpenSoftwareUpdater information

The PUP.Optional.OpenSoftwareUpdater is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.OpenSoftwareUpdater virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Network activity contains more than one unique useragent.
  • Creates a hidden or system file
  • Attempts to identify installed AV products by registry key
  • Detects VirtualBox through the presence of a device
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

myappkeep.com
www.taplikahome.com
www.bing.com
www.qq.com

How to determine PUP.Optional.OpenSoftwareUpdater?


File Info:

crc32: E792845Cmd5: 4784a5ffe922605f9be64c3eef38cc59name: 4784A5FFE922605F9BE64C3EEF38CC59.mlwsha1: 1b80b9d17d164ff5c03557a642d57e212f26d6bcsha256: 60c062485700d53243aab6f68aff57099f741004ac9973e9d717c38fd69768c9sha512: 973a5a3a73e0f4df83c0504cf3019e790817b70b328a9b6158c3d7d536e12e0cb4115fc7995d3ac6068297034e2e968b1dd016771bbed04065fd021d8cb7aa75ssdeep: 6144:JQqyKtiKqa9jj2eACY5C7sbKN2ja89jUlx8Qe98j3H+clXQxvuGOdxeAF6AQgz6/:6EiKTKCYjmNp8FGO8j3flXQNjAFOgz6/type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: (c) InstallerTech Corp. 2015ProductName: ODMFileDescription: Open Downloader ManagerFileVersion: 3.0.0.0CompanyName: InstallerTech CorpTranslation: 0x0000 0x04e4

PUP.Optional.OpenSoftwareUpdater also known as:

K7AntiVirus Adware ( 004b9d941 )
Elastic malicious (high confidence)
DrWeb Adware.Downware.18227
Cynet Malicious (score: 100)
Cylance Unsafe
Sangfor PUP.Win32.Agent.FPY6YB
CrowdStrike win/malicious_confidence_60% (D)
K7GW Adware ( 004b9d941 )
Cybereason malicious.fe9226
Symantec ML.Attribute.HighConfidence
ESET-NOD32 multiple detections
APEX Malicious
Avast Win32:PUP-gen [PUP]
Kaspersky not-a-virus:RiskTool.Win32.Agent.xxv
NANO-Antivirus Riskware.Win32.Agent.dvrtjg
Sophos Generic ML PUA (PUA)
BitDefenderTheta Gen:NN.ZedlaF.34170.by4@a0HZAXii
VIPRE Trojan.Win32.Generic!BT
TrendMicro TROJ_GEN.R002C0PGO21
McAfee-GW-Edition BehavesLike.Win32.AdwareAdload.gc
SentinelOne Static AI – Suspicious PE
Jiangmin AdWare.OpriUpdater.ao
Webroot Pua.Installertech
Avira HEUR/AGEN.1138868
Antiy-AVL Trojan/Generic.ASMalwNS.1E7
Microsoft Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware PUP.InstallerTech/Variant
ZoneAlarm not-a-virus:HEUR:AdWare.NSIS.Relevant.gen
GData Win32.Application.Agent.FPY6YB
AhnLab-V3 PUP/Win32.Helper.C2346599
McAfee Artemis!4784A5FFE922
Malwarebytes PUP.Optional.OpenSoftwareUpdater
Panda Trj/CI.A
TrendMicro-HouseCall TROJ_GEN.R002C0PGO21
Rising Adware.OpenDownloadManager/NSIS!1.CC75 (CLASSIC)
Yandex Trojan.GenAsa!U1H7K7azuSI
Fortinet Riskware/Conduit_SearchProtect
AVG Win32:PUP-gen [PUP]
Paloalto generic.ml

How to remove PUP.Optional.OpenSoftwareUpdater?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Trojan:Win32/LummaStealer.CADV!MTB removal guide

The Trojan:Win32/LummaStealer.CADV!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

MSILHeracles.99188 removal instruction

The MSILHeracles.99188 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Trojan:MSIL/AgentTesla.NEC!MTB removal tips

The Trojan:MSIL/AgentTesla.NEC!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Malware.AI.4168650666 removal instruction

The Malware.AI.4168650666 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

About “Malware.AI.4026059104” infection

The Malware.AI.4026059104 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

IL:Trojan.MSILZilla.120623 information

The IL:Trojan.MSILZilla.120623 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago