Malwarebytes found a PUP in $Recycle.Bin

[DSD]

I ran Malwarebytes last night (its been a couple of months or so since last run) and it found these two files.

-----------
PUP.Optional.InstallCore, C:\$Recycle.Bin\S-1-5-21-860478646-3864081590-2235541041-1001\$RW8RJTC.exe

PUP.Optional.InstallCore, C:\Users\Me\AppData\Local\Temp\ICReinstall_FileZilla_3.8.0_win32-setup.exe
------------

I am assuming they are the same file since some of my research last night says that what is in your Recycle Bin is also found in your $Recycle.Bin. There were mixed results though some places said there is such a thing as a $Recycle.Bin Virus.

Can anyone confirm this? Or have any ideas if what is being found in my $Recycle.Bin is in fact a dangerous file?

Thank you in advance!

PS -I wish Malwarebytes still gave a date of the file like it used to. That was much more helpful in determining if a file was really a virus/malware, or a PUP.

 

[ThrashZone]

Hi,
Filezilla well that is probably a piggyback PUP from som other download,
Use this,
Review Jacee’s instructions to run Adwcleaner here post #7,
Ignore the title of the thread,
http://www.sevenforums.com/system-security/316404-instant-savings-app.html
On the BleepingComputer site use the button that looks like this,

http://www.microsoft.com/security/scanner/en-us/default.aspx

 

[DSD]

Filezilla is a legitimate program I use and have installed on my computer.

 

[ThrashZone]

Yep people love them PUP's they are so pretty
Post Adwcleaner's scan results and see what it finds

 

[DSD]

Wondering why I need to install Adwcleaner when I use SUPERAntiSpyware. It looks to me like
SUPERAntiSpyware does more than Adwcleaner does. I regularly run
SUPERAntiSpyware on my computer.

All I want to know is if that is even possible to have a virus in that location on my computer, in the $Recycle.Bin?

 

[UsernameIssues]

All I want to know is if that is even possible to have a virus in that location on my computer, in the $Recycle.Bin?

Yes.

 

[DSD]

Can someone tell me how the Recycle Bin and $Recycle.Bin work?

I would like to know if these two files are or could be the same file, and if the $Recycle.Bin renames the files randomly.

When I search the internet for this file "$RW8RJTC.exe" nothing comes up.

 

[UsernameIssues]

$Recycle.Bin is a folder that Windows does not show to the user by default.

Under that folder is a folder named Recycle Bin.

That Recycle Bin folder is an alias.

The real folder is named after your SID.




I don't know if the two files mentioned in the OP are the same.

Why not just empty your Recycle Bin and be done with it?

 

[Barman58]

The first thing you have to realize is what a PUP is, it stands for Potentially Unwanted Program - these programs are often just programs that work in a way that they could be used to damage the operating system - I often have Malwarebytes Pro flag parts of my toolkit as PUP's I simply add them to the exclusions list, (these are small tools that I have been using for many years and am secure about the source).

It is quite possible that you may recognize the program and want to keep it - If you are not sure I suggest you select the " quarantine " or similar option so you can recover the file later if you realise you did need it after all

Recycle Bin is the user facing title for $Recycle.Bin which is the system name of the special folder that works as the bin

 

[UsernameIssues]

~~~
Recycle Bin is the user facing title for $Recycle.Bin which is the system name of the special folder that works as the bin

I thought that $Recycle.Bin was a real folder and the SID folders were the ones given the Recycle Bin alias.




Also, Malwarebytes does not flag the normal installer for FileZilla 3.8.0 or the app itself. The OP might have gotten an installer than had PUPs packed in. Either way, both files mentioned in the OP should be deleted.


edit: this is the VirusTotal results for version 3.8.0:




Version 3.14 is out.

 

[Jacee]

PUP. --> Optional.InstallCore

Please read: PUP.Optional.InstallCore.A Removal Guide

 

[ThrashZone]

Wondering why I need to install Adwcleaner when I use SUPERAntiSpyware.

SAS is actually a laughable comparison to Adwcleaner

 

[Jacee]

SAS has it's merits ...

 

[Layback Bear]

I like and use AdwCleaner and Super Anti Spyware but one does not replace the other. They do different things is different ways.

Of course this is my uneducated opinion.