Pup.tarma.options blah blah got in my Toshiba

[rybosix]

Hi, my spyblaster, Free MSE, Free Avast and Free Malwarebtyes all missed this 10 copies of this pup.tarma.option something or another.

I'm update with my W7 32 bit Toshiba and never had any problems ti now.

Symtoms clicked on Firefox and it would not open. Screen froze with only spinning wheel cursor.

Had to force quit Toshibal several times and booting only became more problematic.

Finally booted into safe mode and clicked a few applications to see what worked what did'nt and all worked, so, rebooted normal and was able to get all the way back to normal screen so I clicked malwarebytes and ran quick scan.

Found the 10 or so pups and deleted and all has been fine since.

r6

 

[Jacee]

PUP means potentially unwanted program

Download DDS from one of these links:
DDS.com
DDS.pif

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[rybosix]

PUP means potentially unwanted program

Malwarebytes removed them. Maybe I forgot to state that in my email.

Still not sure how I got them. I clicked show pictures in an email from Amazon confirming my order and tracking number. Cannot recall opening any attachments in over a month, and had not been to any of my regular sites that may be more apt to have suspicous activities in over a week.

r6

 

[Jacee]

Tell me what program "spyblaster" is. *curious*

 

[rybosix]

Ok Now I See

Tell me what program "spyblaster" is. *curious*

Oh excusem, I see now that maybe what you were trying to get was a log of computers actions so you can see when the pups got in.

I will look at doing that cuase i'm curious also.

Syblaster is supposed to be a very low use app. that does same things as malwarebytes does, which is block malicous softe ware other than virusues, if I understand correctly the differrence be malware and viruses.

Ok so now I will go look at following your previous intructions.

Thx

 

[madcratebuilder]

my spyblaster, Free MSE, Free Avast and Free Malwarebtyes all missed this 10 copies of this pup.tarma.option something or another.

If you are running all these at the same time that can be a problem. Up to date MSE and Mbam is going to offer good protection. Pups'a very common, most are adware and a pita at most, not destructive like some virus's can be.

 

[rybosix]

Ran Event Viewer

my spyblaster, Free MSE, Free Avast and Free Malwarebtyes all missed this 10 copies of this pup.tarma.option something or another.

If you are running all these at the same time that can be a problem. Up to date MSE and Mbam is going to offer good protection. Pups'a very common, most are adware and a pita at most, not destructive like some virus's can be.

I'm aware of anti-virus program conflict being the primary concern and did the EICAR test last year to see if my avast and MSE would conflict and they did not , for that one and only one virus.

I finally decided after this incident to only use free avast and drop MSE, although with the EICAR test MSE found EICAR first each time I tried.

Still since my paid( regular updates ) Spyblaster did not get these pups and since I use free MWByites( not regular updates, I understand why MWBytes may have missed the pups, but the MWB may have missed them even if I had regular updates.

It is interesting tho, they apppear to caused some the symptons I listed starting with my firefox not opeing an only getting a spinning wheel. So after the problematic reboots and safe mode finally getting me at least not get frozen screen, I ran MWBytes immediately and there were those pups.

I ran event viewer and can see times when MWBytes removed the pups. but in the time previous to that I cannot find the specific time place and application that allowed them in. Probably via web page but may via MS Mail I dunno.

I guess I'm getting less concerned since it is so difficult to do a search in logs to just find the words pups.

r6

 

[Jacee]

PUP means potentially unwanted program

Download DDS from one of these links:
DDS.com

DDS.pif

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

Please run this tool.

 

[rybosix]

Hi Jacee, these are not verified according to MS PC so I'm reluctant to open and run them uneccesarily. I will have to search for reveiws that these are safe programs to run. Thx r6

 

[Jacee]

DDS --> Doesn't Do Squat

DDS is a non invasive diagnostic tool by sUBs. It is designed to be a "fire and forget" one use diagnostic tool, with which the helper (That would be me) can plan an initial strategy of attack.

It makes no changes to the system, doesn't preform a single registry write, and doesn't even save its logfile. It deletes any temporary files that are the dds file itself upon exit.

 

[rybosix]

Ok I review DDS and ran it. Got two note pads of text.

Not sure it is safe to share details of my computer processes with you or general public.

Remember, I've also already deleted the pups, so maybe you can tell me what to look for.

I know the date and time-- 8/29 4:30PM --- when I ran Malwarebytes, so sometime before that is when I got the pups.

Thx r6

 

[Diosoth]

PUP can be part of any program you install. I actually found a remnant of PUP.optional.softonic this past week, a single temp file that I got as part of one of my gog.com game installs. You typically have to uncheck certain bloatware they pack with their games such as Adobe reader, and from what I can tell one of the games left the temporary file behind after the installer quit. Even though I checked not to install the Softonic thing it still left part of its installer that wasn't cleaned out and Malwarebytes flagged it.

PUP may not necessarily be malware, though some, such as Delta toolbar are.

 

[Jacee]

rybosix, it's safe to post! .... no one has anyway to access your computer with the DDS logs.
All I want to see is what the .txt logs show ME!

 

[rybosix]

rybosix, it's safe to post! .... no one has anyway to access your computer with the DDS logs.
All I want to see is what the .txt logs show ME!

IP addresss or addresses, or ID addresses or whatever.

I had four of these note pads were pinned to my task bar but when i closed them the vanished all together

I could not click on there corners to shorten them either. I closed the last two before looking at them thinking the would stay on desktop were there is still one left.

Isuppose I could run the dds again create new notepads and scan all of them for the word pup.tarma.

r6

 

[Jacee]

Isuppose I could run the dds again create new notepads and scan all of them for the word pup.tarma.

You could do that again, but DDS won't show you "pup.tarma", unless you know how to read the.txt logs