Author Topic: PUP.IBryte found by MalwareBytes  (Read 5878 times)

Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
PUP.IBryte found by MalwareBytes
« on: May 08, 2013, 08:29:48 PM »
Hi...I have Avast Internet Security

MBAM just found PUP.IBryte...what is this??

I have not removed it yet from the MBAM scan - want to ask you if there are any potential harm and steps further to take?
Thank you!

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.05.08.06

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
xxxxxxxxxxxxxxxadministrator]

08/05/2013 3:36:57 PM
MBAM-log-2013-05-08 (16-23-36).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 212438
Time elapsed: 14 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\xxxxxxx\Downloads\44A9.tmp (PUP.IBryte) -> No action taken.

(end)

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21649
  • Gender: Male
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #1 on: May 08, 2013, 09:10:04 PM »
PUP = not a virus/ Possible Unwanted Program
IBryte is some adware crap that will display ads when you browse

also the log say no action taken, so run again and click remove selected

i recomend you also run AdwCleaner to remove any crap files from your browser. run it and click delete
you may post log here
you find it here.  http://forum.avast.com/index.php?topic=53253.0

« Last Edit: May 09, 2013, 08:34:19 AM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #2 on: May 08, 2013, 09:11:43 PM »
Thank you ...will do Pondus!

Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #3 on: May 08, 2013, 09:37:18 PM »
Pondus

ADwCleaner log attached

Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #4 on: May 08, 2013, 09:39:25 PM »
Pondus...I forgot to remove the iBryte from the MBAM 

I must rescan MBAM and remove and then do the ADw cleaner again?

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21649
  • Gender: Male
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #5 on: May 08, 2013, 09:50:27 PM »
only MBAM...update it, run quick scan....if still detected click remove selected

Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #6 on: May 08, 2013, 10:10:58 PM »
OK new updated MBAM is clean (not attaching)

thank you for your prompt help!

Should I... how do I set my Avast to detect such PUP??

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21649
  • Gender: Male
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #7 on: May 09, 2013, 08:29:53 AM »
avast is a bit more strickt in its PUP detection.... it will for eksempel class many factory installed programs from hp / Dell / Thosiba as PUP because of what they can do.....programs that can be good or bad if abused
so when using avast PUP scan you need to know what it is before you remove it, and i Guess that is why it is default off in quick/full scan

i recomend you stay With default avast settings and run a weekly quick scan With avast and Malwarebytes, remeber to update MBAM before you scan as they can have 10 updates released a day
« Last Edit: May 09, 2013, 11:16:27 AM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #8 on: May 09, 2013, 11:54:38 AM »
Thank you Pondus

...I did a full Avast scan after removing the  iBryte from MBAM
but last night Avast found the iBryte again...is now in virus chest
...this morning I update quick scanned with MBAM again and clean

not sure why it was found again after removing

I originally scanned due to an advertisement was following me around and appearing everywhere I went on the internet,

Is this iBryte a difficult one to remove??

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21649
  • Gender: Male
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #9 on: May 09, 2013, 01:53:35 PM »
see the guide here...  http://forum.avast.com/index.php?topic=53253.0
scroll Down to OTL...follow instruction and attach (not copy and paste) the diagnostic log

Essexboy wil then have a look and check for any leftover files that need to be removed

Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #10 on: May 09, 2013, 01:54:38 PM »
OK thank you

Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #11 on: May 09, 2013, 02:35:01 PM »
Essexboy
Thank you
here are the OTL logs attached

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28931
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #12 on: May 09, 2013, 05:28:50 PM »
Looks nice and clean, have all the problems gone ?

Offline Karen R

  • Jr. Member
  • **
  • Posts: 81
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #13 on: May 09, 2013, 05:32:08 PM »
Thanks Essexboy!

I am thinking that the advertisement that is following me is google related maybe part of their adwords

Am relieved to get your all OK blessing ...many thanks as always!

Karen

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28931
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: PUP.IBryte found by MalwareBytes
« Reply #14 on: May 09, 2013, 05:38:20 PM »
No problem Avast probably found an orphan file  ;D

Run OTL and press the cleanup button to remove it and its associated files

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now