Malwarebytes found a PUP in $Recycle.Bin

Page 1 of 2 12 LastLast

  1. DSD
    Posts : 13
    Windows 7 Home Premium 64bit
       #1

    Malwarebytes found a PUP in $Recycle.Bin


    I ran Malwarebytes last night (its been a couple of months or so since last run) and it found these two files.

    -----------
    PUP.Optional.InstallCore, C:\$Recycle.Bin\S-1-5-21-860478646-3864081590-2235541041-1001\$RW8RJTC.exe

    PUP.Optional.InstallCore, C:\Users\Me\AppData\Local\Temp\ICReinstall_FileZilla_3.8.0_win32-setup.exe
    ------------

    I am assuming they are the same file since some of my research last night says that what is in your Recycle Bin is also found in your $Recycle.Bin. There were mixed results though some places said there is such a thing as a $Recycle.Bin Virus.

    Can anyone confirm this? Or have any ideas if what is being found in my $Recycle.Bin is in fact a dangerous file?

    Thank you in advance!

    PS -I wish Malwarebytes still gave a date of the file like it used to. That was much more helpful in determining if a file was really a virus/malware, or a PUP.
      My Computer


  2. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #2

    Hi,
    Filezilla well that is probably a piggyback PUP from som other download,
    Use this,
    Review Jacee’s instructions to run Adwcleaner here post #7,
    Ignore the title of the thread,
    Instant Savings App
    On the BleepingComputer site use the button that looks like this,

      My Computer


  3. DSD
    Posts : 13
    Windows 7 Home Premium 64bit
    Thread Starter
       #3

    Filezilla is a legitimate program I use and have installed on my computer.
      My Computer


  4. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #4

    Yep people love them PUP's they are so pretty :)
    Post Adwcleaner's scan results and see what it finds
      My Computer


  5. DSD
    Posts : 13
    Windows 7 Home Premium 64bit
    Thread Starter
       #5

    Wondering why I need to install Adwcleaner when I use SUPERAntiSpyware. It looks to me like
    SUPERAntiSpyware does more than Adwcleaner does. I regularly run
    SUPERAntiSpyware on my computer.

    All I want to know is if that is even possible to have a virus in that location on my computer, in the $Recycle.Bin?
      My Computer


  6. Posts : 10,485
    W7 Pro SP1 64bit
       #6

    DSD said:
    All I want to know is if that is even possible to have a virus in that location on my computer, in the $Recycle.Bin?
    Yes.
      My Computer


  7. DSD
    Posts : 13
    Windows 7 Home Premium 64bit
    Thread Starter
       #7

    Can someone tell me how the Recycle Bin and $Recycle.Bin work?

    I would like to know if these two files are or could be the same file, and if the $Recycle.Bin renames the files randomly.

    When I search the internet for this file "$RW8RJTC.exe" nothing comes up.
      My Computer


  8. Posts : 10,485
    W7 Pro SP1 64bit
       #8

    $Recycle.Bin is a folder that Windows does not show to the user by default.

    Under that folder is a folder named Recycle Bin.

    That Recycle Bin folder is an alias.

    The real folder is named after your SID.

    Malwarebytes found a PUP in $Recycle.Bin-rb.png


    I don't know if the two files mentioned in the OP are the same.

    Why not just empty your Recycle Bin and be done with it?
      My Computer


  9. Posts : 31,242
    Windows 11 Pro x64 [Latest Release and Release Preview]
       #9

    The first thing you have to realize is what a PUP is, it stands for Potentially Unwanted Program - these programs are often just programs that work in a way that they could be used to damage the operating system - I often have Malwarebytes Pro flag parts of my toolkit as PUP's I simply add them to the exclusions list, (these are small tools that I have been using for many years and am secure about the source).

    It is quite possible that you may recognize the program and want to keep it - If you are not sure I suggest you select the " quarantine " or similar option so you can recover the file later if you realise you did need it after all

    Recycle Bin is the user facing title for $Recycle.Bin which is the system name of the special folder that works as the bin
      My Computers


  10. Posts : 10,485
    W7 Pro SP1 64bit
       #10

    Barman58 said:
    ~~~
    Recycle Bin is the user facing title for $Recycle.Bin which is the system name of the special folder that works as the bin
    I thought that $Recycle.Bin was a real folder and the SID folders were the ones given the Recycle Bin alias.

    Malwarebytes found a PUP in $Recycle.Bin-rb.png


    Also, Malwarebytes does not flag the normal installer for FileZilla 3.8.0 or the app itself. The OP might have gotten an installer than had PUPs packed in. Either way, both files mentioned in the OP should be deleted.


    edit: this is the VirusTotal results for version 3.8.0:


    Malwarebytes found a PUP in $Recycle.Bin-fz.png

    Version 3.14 is out.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:39.
Find Us