UsernameIssues you are doing a fine experiment.
You have to download Eset Free Scan every time you use it. I don't take but a couple of minutes.
I also recommend when your done with Eset you uninstall it.
I wish Malwarebytes made a AIO. Anti virus, anti malware plus PUP and anti spyware. I would buy it.
And yet I have no unwanted programs installed on my system (I check every now and then just to make sure nothing "snuck" by). A good dose of common sense and just paying attention, such as reading the boring EULAs, before pushing a key also goes a long ways toward preventing PUPs from being installed. Keep in mind, if you allow a program to be installed, even if it was due to carelessness (or a test or experiment), technically, it's not a PUP anymore. The PUPs that MBAM detects are program installation files that have sneakware that doesn't give one the option to not install, or installers, such as Open Candy, that can install PUPs.
Then there is the ultimate way to get rid of anything, no matter how persistent it may be: restore to an earlier image. I make a fresh image before I install anything or make any other changes. If something goes pear shaped, I can always go back to where I was before I made the change. I also make one image a week, right after running all my full scans and keep all of them for a month. After that, I keep only the first image of each month. Image restoration is far more reliable than System Restore; in fact, I've turned off System Restore.
I've used it for years (ARP cache poisoning attack) I interpreted the website change wrong. I thought it meant one time use. It did not offer the download a second time. I had to clear IE's cookies to get the download offer to appear again.
I can only state that the apps that I scan with found nothing
Something unwanted could still be there :-(
Infections have gone undetected for years.
I do get to do my experimenting inside virtual machines
Images are a good thing
Images back up undetected infections too :-(
PUPs and toolbars aren't exactly infections so it would be unfair to expect antimalware programs to detect them. It's quick and easy to find them by manually checking in browsers and in Programs and Features. I very rarely find any because I'm pretty careful to not let the little buggers in.
True that. That is why I keep so many old images. I can go back however far I need to get rid of an infection. So far, I haven't had to do that on this machine. I also keep the installation files of all my programs, including older versions, so if I have to go back very far, I can restore any programs I lose.
No one antivirus or anti-malware program is going to catch everything. Nor will they always catch them at first. That's why I have multiple programs and run daily quick scans and weekly full scans. I very rarely find anything (maybe once or twice in the past year) other than occasional tracking super cookies that are most likely harmless but are still intruders none the less.
MBAM will hit on the installation file for FreeFileSync because it contains Open Candy, a PUP that runs only when installing the program who's installation file it is hitchhiking on and will install various other PUPs, such as the delightful Ask toolbar, Chrome browser, Google toolbar, etc. (it varies). Open Candy doesn't get installed and the PUPs it tries to install are easily defeated by deselecting them during program installation (granted, you do have to pay close attention). I just added .disable to FreeFileSync's installation file's filename to temporarily disable the file so MBAM won't keep hitting on that one file without disabling MBAM's ability to pick up on any other intrusions of Open Candy.
This may be more helpful with PUPs and other annoying crap.
The PC Decrapifier Wipes Unwanted Junk | The PC Decrapifier
If one of the annoyingly big green download buttons is clicked that is for some "zip opener" crap.
Click the d/l button here,
and this page opens with a big blue d/l button. I got a clean download.
Download | The PC Decrapifier
Yes you confirm the importance of reading the entire page and just not the sponsored adds
Catchy name I have to admit
Quote
