Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: item found in Malwarebytes (from udemy.com?)

05 Jun 2016   #1
HAVOC

Windows 7 Professional 64bit
 
 
item found in Malwarebytes (from udemy.com?)

I did a scan with Malwarebytes.
It found one item and I think it's related to udemy.com. I use google chrome to view courses and it happens to be in the google folder.

I removed it once before but it shows up again.

AdwCleaner also finds it.




Attached Images
item found in Malwarebytes (from udemy.com?)-pup.png 
My System SpecsSystem Spec
.
05 Jun 2016   #2
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Hi:

Re: the MBAM detection -- please be sure MBAM is properly configured to both detect AND remove PUPs.
(Dashboard > "settings" > "detection and protection" > "non-malware protection" > "PUP" > "Treat detections as malware")

If you have removed it and it reappears on subsequent scans, then most likely you are reacquiring it via visiting the same website, or via something on your system carrying the PUP as a "freebie", or it may be reappearing from Google sync (seems likely if you are using Chrome).

In the latter case, you may need to clean out all of your sync'd settings and perhaps reset (or even reinstall) Chrome.
If that doesn't resolve the issue, then you might need a deeper look at the system to clean out whatever is respawning this PUP.

OTOH If you think that the PUP might be a false positive detection by MBAM, then you may want to start by reading the pinned topic HERE and then submitting at least a scan log (for starters) in the MBAM file F/P forum HERE. The Research team will evaluate the data to determine if the detection may (or may not) be a F/P.

HTH,

MM
My System SpecsSystem Spec
05 Jun 2016   #3
HAVOC

Windows 7 Professional 64bit
 
 

I'm going to do a couple scans with MWB and see when it actually reappears.
My System SpecsSystem Spec
.

05 Jun 2016   #4
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Hi:

If it's reappearing in both MBAM and AdwCleaner scans, then the most likely explanations are that something on your system is regenerating it (perhaps the application with which it came bundled in the first place) or it is respawning from your sync'd Google data.

If it's the former, then a bit of deeper work might be needed for complete removal (PUPs can be pesky).
If it's the latter, then you'll need (at a minimum) to clear out your sync'd Google/Chrome data and probably reset Chrome; additional work might be needed.

Start by disabling Sync
How To Delete Your Google Chrome Browser Sync Data
Chrome - Reset browser settings
Reset Chrome sync

If that fails then you might want to Uninstall Google Chrome and do not reinstall until sure the system is clean.

Let us know how it goes,
MM
My System SpecsSystem Spec
05 Jun 2016   #5
xxxdannyxxx

Windows 7 Home Premium x64 SP1
 
 

I have a feeling its a F/P. I have been getting the same for a few days now, delete it and it reappears and never visited the site mentioned above. Also using chrome.
Full Path - C:\Users\Username\AppData\Local\Google\Chrome\User Data\Default\Preferences

Danny
My System SpecsSystem Spec
05 Jun 2016   #6
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Hi:

PUP classifications change from day to day, based on the criteria to which programs are assigned to that category. A change to a program's behavior can result in its being newly classified. More info HERE.

Quote   Quote: Originally Posted by xxxdannyxxx View Post
I have a feeling its a F/P. I have been getting the same for a few days now, delete it and it reappears and never visited the site mentioned above. Also using chrome.
Full Path - C:\Users\Username\AppData\Local\Google\Chrome\User Data\Default\Preferences

Danny
To be safe, especially since the OP reports that AdwCleaner is also detecting it....

Quote   Quote: Originally Posted by MoxieMomma View Post
OTOH If you think that the PUP might be a false positive detection by MBAM, then you may want to start by reading the pinned topic HERE and then submitting at least a scan log (for starters) in the MBAM file F/P forum HERE. The Research team will evaluate the data to determine if the detection may (or may not) be a F/P.
But it's certainly up to you.

Cheers,
My System SpecsSystem Spec
05 Jun 2016   #7
DavidE

Multi-Boot W7_Pro_x64 W8.1_Pro_x64 W10_Pro_x64
 
 

I would upload and scan the file at https://www.virustotal.com/
I've seen where the same file gets different results when scanning locally vs. virus total for the same scanner.
I've also seen where the same file gets reported differently depending on the type of local scan used.
None of the security programs are perfect.
My System SpecsSystem Spec
05 Jun 2016   #8
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Quote   Quote: Originally Posted by DavidE View Post
I would upload and scan the file at https://www.virustotal.com/
Excellent idea.

Quote:
I've seen where the same file gets different results when scanning locally vs. virus total for the same scanner.
I've also seen where the same file gets reported differently depending on the type of local scan used.
None of the security programs are perfect.
VT and jotti and other sites are a good way to get a broader view.

One just needs to be aware that "legal" PUPs are not true malware in the strict sense.
Most have EULAs or require some sort of user behavior (especially failing to opt-out of installation) for their installation.
Many scanners do not even target them.
(But I certainly don't want any of that junk on my system -- sooner or later, they tend to lead to more serious problems.)

This particular "hit" may or may not be a F/P.
But the only way to know for sure and to have a particular file removed from a particular scanner's database as a F/P is to submit the necessary data to the software vendor.

One can -- in most scanners, including MBAM -- set an "exclusion" for a given PUP.
But doing so without first checking with the security software vendor is not particularly safe.


Cheers,
MM
My System SpecsSystem Spec
05 Jun 2016   #9
HAVOC

Windows 7 Professional 64bit
 
 

I ran malwarebytes again after opening chrome and going to udemy.com. The PUP is no longer there. I'll use chrome for a bit and see what site the PUP might be associated with. I thought it was related to udemy because of the ability to comment on videos that you watch.
My System SpecsSystem Spec
05 Jun 2016   #10
DavidE

Multi-Boot W7_Pro_x64 W8.1_Pro_x64 W10_Pro_x64
 
 

At VT you can scan a URL such as www.udemy.com.
Here are the VT scan results for that site (it scans clean)
https://www.virustotal.com/en/url/8b...1de2/analysis/
My System SpecsSystem Spec
Reply

 item found in Malwarebytes (from udemy.com?)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Can't Delete Folder - Item Not Found
I have tried searching for a solution but nothing works. I have this empty .ini file with no name in this folder I want to delete that is located on a memory card. Everytime I try to delete I get an error saying that it could not find this item. I tried using a program that another topic on this...
General Discussion
Item Not Found: Could Not Find This Item
Hello! I've had a problem with a particular folder on my desktop for a while now and have finally decided to fix it. There is a folder that has some thing to do with Camtasia 7 (Software for screen recording and video editing) stuck on my desktop that I can't delete/rename. ...
General Discussion
Malwarebytes found some things, now what?
I've just run malwarebytes and it found 34 Spyware.OnlineGames. They are quarantined but what should I do now? If I delete them will it have any negative effects on the computer? What the hell is Spyware.OnlineGames? I do play games on this computer and I have downloaded Half Life 2: Lost Coast off...
System Security
Cut/paste folder problem : Item Not Found
nvm
General Discussion
Item Not Found - Can't Delete ... Files
Hi everyone, I've been trying for hours to move everything from my old external hard drive to my new larger one (in Windows 7). Unfortunately, it always stops with errors. It keeps giving me the message "Item Not Found - Could not find this item. This is no longer located in..." It seems...
General Discussion
Restoring item from quarantine in Malwarebytes?
I think I accidentally restored some malware from quarantine so I need to know if I did or not. So there is only one way I can find out on if I clicked on restore or delete- by having this question answered: Do you get some kind of warning message if you click on restore like you do in...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:51.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App