Should I remove “PUP.Optional.PennyBee”?

The PUP.Optional.PennyBee is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.PennyBee virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine PUP.Optional.PennyBee?


File Info:
crc32: 6AF3ADFF
md5: a4cb22c2efce885430864a11ee2950ff
name: A4CB22C2EFCE885430864A11EE2950FF.mlw
sha1: 7c82a0210a42a41d7dc9fc5455b1544b50a634da
sha256: ee4d142f65584280d196d393269b486353d63684a1aa406900f8e2e4b1d51131
sha512: f73771fc8b0b59563adfd0cceb20b5925ca55fbd35159ddbfd1dc3b9dea8e67f6dcfff01bc59fc6ce8c1be130d42df1b7c12d0aee2109bbb3ab70a25f3a984ec
ssdeep: 3072:+QIURTXJ545HoXUulLXJQq5YiZhA62vOQ+y+3B8TF4HVgLJ8Q1z6V7kUA+OX2Pic:+sDItudzCf62vOihFNLqQsVvdOXLL4rZ
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
FileVersion: 1.1.1.1
ProductVersion: 1.1.1.1
Translation: 0x0409 0x0000

PUP.Optional.PennyBee also known as:

Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Lyrics.1951
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.NSIS.DllPatcher.Gen
ALYac	Gen:Variant.Adware.AdLoad.29
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Cybereason	malicious.2efce8
Symantec	Trojan.Gen
ESET-NOD32	Win32/TrojanDropper.Addrop.AB
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Adware.AdLoad.29
NANO-Antivirus	Trojan.Win32.Razy.eanvff
MicroWorld-eScan	Gen:Variant.Adware.AdLoad.29
Tencent	Win32.Trojan.Taranis.Lnod
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34170.hyX@aSg7H2ki
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_NOPLE.SM0
McAfee-GW-Edition	BehavesLike.Win32.AdwareAdload.dc
FireEye	Gen:Variant.Adware.AdLoad.29
Emsisoft	Application.Toolbar (A)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Taranis.2346
Antiy-AVL	Trojan/Generic.ASMalwNS.2AC0
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Adware.AdLoad.29
SUPERAntiSpyware	PUP.PennyBee/Variant
GData	Gen:Variant.Adware.AdLoad.29
AhnLab-V3	PUP/Win32.Pennybee.R164339
McAfee	Artemis!A4CB22C2EFCE
MAX	malware (ai score=81)
Malwarebytes	PUP.Optional.PennyBee
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_NOPLE.SM0
Rising	Trojan.Generic@ML.100 (RDML:e3mWR+xSsSNXypbf1RYy0A)
Fortinet	W32/Generic.AC.33D741!tr
AVG	Win32:Trojan-gen

How to remove PUP.Optional.PennyBee?

PUP.Optional.PennyBee removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X