Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: PUP.Optional in Registry Key will not go away


16 Oct 2013   #21
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Clean out all temps by downloading TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

After rebooting, see if it still shows up.

Quote:
PUP.Optional.Bandoo.A got on your computer after you have installed a freeware software (video recording/streaming, download-managers or PDF creators) that had bundled into their installation this browser hijacker. This Potentially Unwanted Propgram is also bundled within the custom installer on many download sites (examples: CNET, Brothersoft or Softonic), so if you have downloaded a software from these websites, chances are that PUP.Optional.Bandoo.A was installed during the software setup process.
You should always pay attention when installing software because often, a software installer includes optional installs, such as this PUP.Optional.Bandoo.A browser hijacker. Be very careful what you agree to install.
Always opt for the custom installation and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place. It goes without saying that you should not install software that you don’t trust.



My System SpecsSystem Spec
.

16 Oct 2013   #22

windows 7 home premium 32bit
 
 

I shall try that but for now here is what Spybot shows as for some strange reason Malwarebytes is nolonger showing it since I started this forum help!!... weird...its like it knows!.......Anyways, If you look Spybot says it has 14 items found but only shows 13 up in details...this is what I was saying about one being hidden.....I know the ones showing are only cookies but I want to see what this unknown not showing one is!

PUP.Optional in Registry Key will not go away-snip-spybot.png


My System SpecsSystem Spec
16 Oct 2013   #23

windows 7 home premium 32bit
 
 

That Temp file cleaner was bringing all sorts of rubbish with its download and wanting to change browser so cancelled it
My System SpecsSystem Spec
.


16 Oct 2013   #24

windows 7 home premium 32bit
 
 

Finally it has shown up in Malwarebytes...6 things found
Attachment 290073

second page displaying what it found
Attachment 290074

third page showing that they are removed and it shows the one I keep getting all the time
PUP.Optional in Registry Key will not go away-capture-3.png


My System SpecsSystem Spec
16 Oct 2013   #25

windows 7 home premium 32bit
 
 

PUP.Optional in Registry Key will not go away-capture-4.png


for some reason the first two did not upload correctly but here is one of the screens


My System SpecsSystem Spec
16 Oct 2013   #26

W7 Pro SP1 64bit
 
 

My goal is to help you get info to those that are already helping you.

Sometimes people upload images and files to this forum and then never make a post. To clean up such files, the forum software has a time limit on files that have been uploaded. If you do not post within that time limit (maybe 15 minutes), then the file goes away. I have that problem a lot :-)

On the Malwarebytes info, you can use notepad to save the log file to your desktop - then upload the entire file as one single attachment that is easy for us to read.

Another way to get large amounts of text into a post is to click on the hash symbol (pound symbol) then copy/paste the text between the code tags:

Code:
paste stuff here
PUP.Optional in Registry Key will not go away-code-tags.png


My System SpecsSystem Spec
16 Oct 2013   #27

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by angiesluck View Post
That Temp file cleaner was bringing all sorts of rubbish with its download and wanting to change browser so cancelled it
Perhaps you clicked on an advertizement.

(You might want to watch this in the full screen mode and at 720p resolution.)
My System SpecsSystem Spec
16 Oct 2013   #28
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Quote   Quote: Originally Posted by angiesluck View Post
That Temp file cleaner was bringing all sorts of rubbish with its download and wanting to change browser so cancelled it
You have more 'malware' than you thought! I've never known TFC to want to change a "browser"....
BUT! ... If you have Spybot s&d, plus "Tea Timer" running, then it will definitely notify you that you are changing your browser and home page.

What we are doing here is trying to get rid of the malware that Spybot & Tea Timer are trying to protect. Disable Spybot s&d...
1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts
5) Restart your computer.


Now, Copy and paste these lines in Note pad.
@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.


Please allow any Browser changes that might pop up!!

Once you have rebooted, please download a fresh/new copy of AdwCleaner:
AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Using AdwCleaner v3: Scan & Clean:
Double click on AdwCleaner.exe to run the tool again.
  • Click on the Scan button.
  • AdwCleaner will begin to scan your computer like it did before.
  • After the scan has finished...
  • This time, click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
My System SpecsSystem Spec
17 Oct 2013   #29

windows 7 home premium 32bit
 
 

it does not give me an option to save as flush.bat................on save as... it just gives Text Documents (*.txt) or All files

Also am I not to bother to try with downloading the TFC again as you previously asked?
My System SpecsSystem Spec
17 Oct 2013   #30

W7 Pro SP1 64bit
 
 

See if this helps:

(You might want to watch this in the full screen mode and at 720p resolution.)
My System SpecsSystem Spec
Reply

 PUP.Optional in Registry Key will not go away




Thread Tools



Similar help and support threads for2: PUP.Optional in Registry Key will not go away
Thread Forum
Optional Updates Windows Updates & Activation
Solved Optional Updates Windows Updates & Activation
Solved MSE Optional System Security
Optional Update Windows Updates & Activation

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:38 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33