搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Malwarebytes finding a PUP on Firefox, how do I remove?

  • 5 个回答
  • 1 人有此问题
  • 8 次查看
  • 最后回复者为 user1280777

more options

I have a paid Mcafee account which didn't highlight a problem after a scan, but when I did a scan with the free version of Malwarebytes it highlighted some PUP's. Malwarebytes seemed to be able to delete most of them, but I'm wondering how to get rid of the one that seems to be associated with Firefox. Here is the log details;

Malwarebytes Anti-Malware www.malwarebytes.org

Scan Date: 17/11/2015 Scan Time: 01:57 Logfile: Malwarebytes Log 1.txt Administrator: Yes

Version: 2.2.0.1024 Malware Database: v2015.11.16.07 Rootkit Database: v2015.11.14.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled

OS: Windows 10 CPU: x64 File System: NTFS User: Derek

Scan Type: Threat Scan Result: Completed Objects Scanned: 346918 Time Elapsed: 23 min, 26 sec

Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled

Processes: 0 (No malicious items detected)

Modules: 0 (No malicious items detected)

Registry Keys: 0 (No malicious items detected)

Registry Values: 0 (No malicious items detected)

Registry Data: 0 (No malicious items detected)

Folders: 0 (No malicious items detected)

Files: 1 PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8]

Physical Sectors: 0 (No malicious items detected)


(end)

I have a paid Mcafee account which didn't highlight a problem after a scan, but when I did a scan with the free version of Malwarebytes it highlighted some PUP's. Malwarebytes seemed to be able to delete most of them, but I'm wondering how to get rid of the one that seems to be associated with Firefox. Here is the log details; Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 17/11/2015 Scan Time: 01:57 Logfile: Malwarebytes Log 1.txt Administrator: Yes Version: 2.2.0.1024 Malware Database: v2015.11.16.07 Rootkit Database: v2015.11.14.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 10 CPU: x64 File System: NTFS User: Derek Scan Type: Threat Scan Result: Completed Objects Scanned: 346918 Time Elapsed: 23 min, 26 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 1 PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8] Physical Sectors: 0 (No malicious items detected) (end)

所有回复 (5)

more options

Never had this problem before, when I went to the files location to check on it's previous versions it gives me the date 02/11/2015.

I crossed referenced that date with the programs I had in the, 'uninstall a program,' section in Control Panel. The only two programs that it states were installed on that date is a host app service from Pokki, and a Pokki start menu.

I don't recall downloading this program, but after doing some research it seems it comes preinstalled on a lot of Acer computers and their subsidiaries computers. It seems that the program can be quite invasive, and can be flagged as a potentially unwanted program depending on what anti-virus software you scan your computer with.

more options

keyword.URL is no longer used in current releases, so you can reset this pref on the about:config page via the right-click context menu to the default value to have it removed.

You can open the about:config page via the location/address bar. You can accept the warning and click "I'll be careful" to continue.

more options

Pablo55 said

Files: 1
PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8]

I wonder what that last part means? If Malwarebytes replaced the entire prefs.js file, then you would have lost some personal settings and be back to, for example, the default home page, main toolbar layout, and no pinned sites on the new tab page. Did that happen??

由jscher2000 - Support Volunteer于修改

more options

Hi, no settings changed that I am aware of. I am always clearing my cache so I never really notice any sites pinned on a new tabs page except for the generic ones.

I recently just purchased two new computers an Acer netbook, and a Packard Bell desktop. Packard Bell is a subsidiary of Acer as far as I am aware. Apparently a lot of new Acer computers come preinstalled with previously uninstalled bloatware. I think Malwarebytes might be flagging some of these programs, there is one in particular called Pokki which seems to be problematic.

I'll probably just have to get some advice on how to completely remove these types of preinstalled programs from both of my computers.

more options

I only just installed Malwarebytes on these new computers a couple of days ago, and after I ran my first scan on both computers it flagged several PUP's on each of them.

I have a paid version of Mcafee on both computers, and it didn't flag any problems after running a full scan on each of them.

Malwarebytes seems to be flagging PUP's that Mcafee isn't.