PUP.Optional.WebCompanion removal tips

The PUP.Optional.WebCompanion is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.WebCompanion virus can do?

• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine PUP.Optional.WebCompanion?

File Info:
name: F6B520709150A2F1679B.mlw
path: /opt/CAPEv2/storage/binaries/3c1c75a5a4aed9930964b5cc570176e67fd3198e8c511feea3967d4c56d77b9b
crc32: 01D8232D
md5: f6b520709150a2f1679b4cf9a99a89f1
sha1: 55e1deae6d3426a1b8fbffacd8761ed080a17bb7
sha256: 3c1c75a5a4aed9930964b5cc570176e67fd3198e8c511feea3967d4c56d77b9b
sha512: ccc39c35ac1fc5d4f455c3691994f140911b3e450ddf23c2e87897c3fa34ba42a5836ffd4f6a28477f69420059583110d0ab097935695df1418991052bf85a6d
ssdeep: 12288:yG5knZfFKerk6pW21Cg/f35Q5911xbBBKTYGXYm4FYoZHYtI/J:yG50ZfFKUHw21XX3EN3K3J4DgI/J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F6C4F1127EE189BAD5420131C974AFE5E2F6FE161E21546333993E3E3F3A542C132A5E
sha3_384: 299dc661a23c6e80e573d88510a959341bcd72570d8807384e9746df82585877b360bc1d4641f76ebf90bb7d38e9b88a
ep_bytes: 558bec6aff68e8b9410068fc47410064
timestamp: 2011-04-18 18:54:06

Version Info:
FileVersion: 11.908.5.907
ProductVersion: 11.908.5.907
CompanyName: Lavasoft
FileDescription: Web Companion Installer
InternalName: Installer.exe
LegalCopyright: c Lavasoft Limited. All Rights Reserved.
OriginalFilename: Installer.exe
ProductName: Web Companion Installer
Translation: 0x0409 0x04b0

PUP.Optional.WebCompanion also known as:

How to remove PUP.Optional.WebCompanion?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.