Malwarebytes finding a PUP on Firefox, how do I remove?
I have a paid Mcafee account which didn't highlight a problem after a scan, but when I did a scan with the free version of Malwarebytes it highlighted some PUP's. Malwarebytes seemed to be able to delete most of them, but I'm wondering how to get rid of the one that seems to be associated with Firefox. Here is the log details;
Malwarebytes Anti-Malware www.malwarebytes.org
Scan Date: 17/11/2015 Scan Time: 01:57 Logfile: Malwarebytes Log 1.txt Administrator: Yes
Version: 2.2.0.1024 Malware Database: v2015.11.16.07 Rootkit Database: v2015.11.14.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled
OS: Windows 10 CPU: x64 File System: NTFS User: Derek
Scan Type: Threat Scan Result: Completed Objects Scanned: 346918 Time Elapsed: 23 min, 26 sec
Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled
Processes: 0 (No malicious items detected)
Modules: 0 (No malicious items detected)
Registry Keys: 0 (No malicious items detected)
Registry Values: 0 (No malicious items detected)
Registry Data: 0 (No malicious items detected)
Folders: 0 (No malicious items detected)
Files: 1 PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8]
Physical Sectors: 0 (No malicious items detected)
(end)
All Replies (5)
Never had this problem before, when I went to the files location to check on it's previous versions it gives me the date 02/11/2015.
I crossed referenced that date with the programs I had in the, 'uninstall a program,' section in Control Panel. The only two programs that it states were installed on that date is a host app service from Pokki, and a Pokki start menu.
I don't recall downloading this program, but after doing some research it seems it comes preinstalled on a lot of Acer computers and their subsidiaries computers. It seems that the program can be quite invasive, and can be flagged as a potentially unwanted program depending on what anti-virus software you scan your computer with.
keyword.URL is no longer used in current releases, so you can reset this pref on the about:config page via the right-click context menu to the default value to have it removed.
You can open the about:config page via the location/address bar. You can accept the warning and click "I'll be careful" to continue.
Pablo55 said
Files: 1
PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8]
I wonder what that last part means? If Malwarebytes replaced the entire prefs.js file, then you would have lost some personal settings and be back to, for example, the default home page, main toolbar layout, and no pinned sites on the new tab page. Did that happen??
Okulungisiwe ngu jscher2000 - Support Volunteer
Hi, no settings changed that I am aware of. I am always clearing my cache so I never really notice any sites pinned on a new tabs page except for the generic ones.
I recently just purchased two new computers an Acer netbook, and a Packard Bell desktop. Packard Bell is a subsidiary of Acer as far as I am aware. Apparently a lot of new Acer computers come preinstalled with previously uninstalled bloatware. I think Malwarebytes might be flagging some of these programs, there is one in particular called Pokki which seems to be problematic.
I'll probably just have to get some advice on how to completely remove these types of preinstalled programs from both of my computers.
I only just installed Malwarebytes on these new computers a couple of days ago, and after I ran my first scan on both computers it flagged several PUP's on each of them.
I have a paid version of Mcafee on both computers, and it didn't flag any problems after running a full scan on each of them.
Malwarebytes seems to be flagging PUP's that Mcafee isn't.