Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Malwarebytes found a PUP in $Recycle.Bin

24 Sep 2015   #1
DSD

Windows 7 Home Premium 64bit
 
 
Malwarebytes found a PUP in $Recycle.Bin

I ran Malwarebytes last night (its been a couple of months or so since last run) and it found these two files.

-----------
PUP.Optional.InstallCore, C:\$Recycle.Bin\S-1-5-21-860478646-3864081590-2235541041-1001\$RW8RJTC.exe

PUP.Optional.InstallCore, C:\Users\Me\AppData\Local\Temp\ICReinstall_FileZilla_3.8.0_win32-setup.exe
------------

I am assuming they are the same file since some of my research last night says that what is in your Recycle Bin is also found in your $Recycle.Bin. There were mixed results though some places said there is such a thing as a $Recycle.Bin Virus.

Can anyone confirm this? Or have any ideas if what is being found in my $Recycle.Bin is in fact a dangerous file?

Thank you in advance!

PS -I wish Malwarebytes still gave a date of the file like it used to. That was much more helpful in determining if a file was really a virus/malware, or a PUP.


My System SpecsSystem Spec
.
24 Sep 2015   #2
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Hi,
Filezilla well that is probably a piggyback PUP from som other download,
Use this,
Review Jacee’s instructions to run Adwcleaner here post #7,
Ignore the title of the thread,
Instant Savings App
On the BleepingComputer site use the button that looks like this,

My System SpecsSystem Spec
24 Sep 2015   #3
DSD

Windows 7 Home Premium 64bit
 
 

Filezilla is a legitimate program I use and have installed on my computer.
My System SpecsSystem Spec
.

24 Sep 2015   #4
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Yep people love them PUP's they are so pretty
Post Adwcleaner's scan results and see what it finds
My System SpecsSystem Spec
24 Sep 2015   #5
DSD

Windows 7 Home Premium 64bit
 
 

Wondering why I need to install Adwcleaner when I use SUPERAntiSpyware. It looks to me like
SUPERAntiSpyware does more than Adwcleaner does. I regularly run
SUPERAntiSpyware on my computer.

All I want to know is if that is even possible to have a virus in that location on my computer, in the $Recycle.Bin?
My System SpecsSystem Spec
25 Sep 2015   #6
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by DSD View Post
All I want to know is if that is even possible to have a virus in that location on my computer, in the $Recycle.Bin?
Yes.
My System SpecsSystem Spec
25 Sep 2015   #7
DSD

Windows 7 Home Premium 64bit
 
 

Can someone tell me how the Recycle Bin and $Recycle.Bin work?

I would like to know if these two files are or could be the same file, and if the $Recycle.Bin renames the files randomly.

When I search the internet for this file "$RW8RJTC.exe" nothing comes up.
My System SpecsSystem Spec
25 Sep 2015   #8
UsernameIssues

W7 Pro SP1 64bit
 
 

$Recycle.Bin is a folder that Windows does not show to the user by default.

Under that folder is a folder named Recycle Bin.

That Recycle Bin folder is an alias.

The real folder is named after your SID.

Malwarebytes found a PUP in $Recycle.Bin-rb.png


I don't know if the two files mentioned in the OP are the same.

Why not just empty your Recycle Bin and be done with it?


My System SpecsSystem Spec
25 Sep 2015   #9
Barman58

Windows 10 Pro x64 x2 Windows 10 Enterprise x64, Ubuntu
 
 

The first thing you have to realize is what a PUP is, it stands for Potentially Unwanted Program - these programs are often just programs that work in a way that they could be used to damage the operating system - I often have Malwarebytes Pro flag parts of my toolkit as PUP's I simply add them to the exclusions list, (these are small tools that I have been using for many years and am secure about the source).

It is quite possible that you may recognize the program and want to keep it - If you are not sure I suggest you select the " quarantine " or similar option so you can recover the file later if you realise you did need it after all

Recycle Bin is the user facing title for $Recycle.Bin which is the system name of the special folder that works as the bin
My System SpecsSystem Spec
25 Sep 2015   #10
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by Barman58 View Post
~~~
Recycle Bin is the user facing title for $Recycle.Bin which is the system name of the special folder that works as the bin
I thought that $Recycle.Bin was a real folder and the SID folders were the ones given the Recycle Bin alias.

Malwarebytes found a PUP in $Recycle.Bin-rb.png


Also, Malwarebytes does not flag the normal installer for FileZilla 3.8.0 or the app itself. The OP might have gotten an installer than had PUPs packed in. Either way, both files mentioned in the OP should be deleted.


edit: this is the VirusTotal results for version 3.8.0:


Malwarebytes found a PUP in $Recycle.Bin-fz.png

Version 3.14 is out.


My System SpecsSystem Spec
Reply

 Malwarebytes found a PUP in $Recycle.Bin




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
If malwarebytes found threats and i delete all the threats will it bro
If malwarebytes found threats and i delete all the threats will it broke my pc?
System Security
Found this little goodie messing with MSE & Malwarebytes
I had a problem with internet access about a week ago and after check two computer, modem and router settings I called the ISP. They did something at there end and it worked for about a day. Called them again and went through the routine with them again. They came to the conclusion that it was...
General Discussion
Malwarebytes has a new software- Malwarebytes Anti Exploit
has anyone installed this? https://www.malwarebytes.org/antiexploit/ I got an email from Malwarebytes about it I just installed the free version on my windows 8 and windows 7 test machines so far I am not seeing any problems but then again I just installed it :P anyone else try it?
System Security
Malwarebytes found 3 objects in Windows 7 Professional ISO
6 months ago my friend gave me the ISO from the tech company he works at, but the download link is invalid now. So I used the ISO that I had saved on my old laptop from when I initially downloaded it. I copied the ISO onto this, my main PC built 6 months ago, and ran Malwarebytes on it and 3...
System Security
SUPERAntiSpyware found an attack, Malwarebytes too
Up until last night, I was running Vipre Internet Security 2012. This morning, I got rid of that program due to problems it was causing. My solution to that problem posed in...
System Security
Malwarebytes found some things, now what?
I've just run malwarebytes and it found 34 Spyware.OnlineGames. They are quarantined but what should I do now? If I delete them will it have any negative effects on the computer? What the hell is Spyware.OnlineGames? I do play games on this computer and I have downloaded Half Life 2: Lost Coast off...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:57.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App