Categories: PUA

Should I remove “PUP.Optional.Proinstall”?

The PUP.Optional.Proinstall is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.Proinstall virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine PUP.Optional.Proinstall?


File Info:
name: 902A07DB2B9098086B2C.mlwpath: /opt/CAPEv2/storage/binaries/3cd1e5fdf1fb78ff31d2dd5421e44d6989731292762658ae372c69b757ebd6e9crc32: 6A113253md5: 902a07db2b9098086b2c86f7762a7223sha1: 08f1293c2f6454a4f5a768be8f1260c5f2197f65sha256: 3cd1e5fdf1fb78ff31d2dd5421e44d6989731292762658ae372c69b757ebd6e9sha512: 3b2cd7e3ac7cb13bc42b099009749c38be11dda5ea4e6e6067ac9f79095e9c5a27ebcc22a3857daafecc2a842648869c5a00ce6b1a5ffcd4f6e55eb997ea47d5ssdeep: 1536:HVdePelp2Xy+tuQOzOYE5aXPn8OopQ/RxIZ5WOJeSRIQecOfJ5oooooooooooooI:QweqOYEUXPnNg5HbIXJ4dECeeAhFrJtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12E34E8A0CA874410D6A54FF035C03E316EF2F96D24E4A6E9E5878D7F7461046FA2BA37sha3_384: b7f89c96606b45fbee72c0a1f7f8cb99fbe1dbbac1a446f0d9d7ada6922969e006ebc0d3666e895b282ea948576b3704ep_bytes: 81ecd4020000535556576a2033ed5e89timestamp: 2012-02-24 19:19:59
Version Info:
0: [No Data]

PUP.Optional.Proinstall also known as:

Lionic	Riskware.Win32.Proinstall.1!c
MicroWorld-eScan	Gen:Variant.Adware.Adload.25
FireEye	Generic.mg.902a07db2b909808
CAT-QuickHeal	PUA.Proinstall.Gen
Skyhigh	Artemis!PUP
ALYac	Gen:Variant.Adware.Adload.25
Cylance	unsafe
Zillya	Adware.AdWrapperCRTD.Win32.5204
Sangfor	Adware.Win32.AdLoad.Vefk
K7AntiVirus	Unwanted-Program ( 00587b8f1 )
K7GW	Unwanted-Program ( 00587b8f1 )
CrowdStrike	win/grayware_confidence_100% (D)
VirIT	Adware.Win32.Downware.QQY
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
ESET-NOD32	Win32/WinWrapper.J potentially unwanted
ClamAV	Win.Trojan.Generic-9941839-0
Kaspersky	not-a-virus:Downloader.Win32.AdLoad.tocc
BitDefender	Gen:Variant.Adware.Adload.25
NANO-Antivirus	Trojan.Win32.Agent.dvtoqe
SUPERAntiSpyware	PUP.Proinstall/Variant
Avast	FileRepMalware [Misc]
Tencent	Win32.Trojan-Downloader.Adload.Pgil
Sophos	Generic Reputation PUA (PUA)
F-Secure	PotentialRisk.PUA/WinWrapper.iona
DrWeb	Adware.Downware.11256
VIPRE	Gen:Variant.Adware.Adload.25
Trapmine	malicious.high.ml.score
Emsisoft	Application.Downloader (A)
GData	Gen:Variant.Adware.Adload.25
Webroot	Pua.Adware.Proinstall
Varist	W32/Adload.EV.gen!Eldorado
Avira	PUA/WinWrapper.iona
Antiy-AVL	GrayWare/Win32.WinWrapper.j
Xcitium	Application.Win32.Winwrapper.D@6lncvq
Arcabit	PUP.Downloader.ProInstall
ZoneAlarm	not-a-virus:Downloader.Win32.AdLoad.tocc
Microsoft	PUABundler:Win32/YTDVideoDownload
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.ProInstall.C894332
McAfee	Artemis!902A07DB2B90
MAX	malware (ai score=61)
Malwarebytes	PUP.Optional.Proinstall
Panda	PUP/Multitoolbar
Yandex	PUA.Downloader!fgRD1aO5VRo
MaxSecure	Downloader.W32.Agent.gen_250902
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS