Hi there. Here is my problem: I bought a laptop a week ago and since yeseterday I found a lot of pop-ups on my browser while I was surfing online. So I downloaded and ran Malwarebytes scan, it detected a virus called PUP.Optional.SavePass.A. I tried to remove it but it seems failed. On the next scan, this PUP can be found again. The virus doesn’t go away for some reasons. So how do I get rid of it without coming back? Is this specific spyware known for stealing banking information?
PUP.Optional.SavePass.A is classified as Potentially Unwanted Program (as known as PUP) that can install and attack browsers like Safari, Mozilla Firefox, Google Chrome and Internet Explorer without any permission. It may not be considered as a virus, however this PUP can help install more system infections since it shows pop-up ads and links that often include malicious content. It is able to corrupt the targeted Internet browser by installing annoying toolbar and causing browser redirection. Now there are many ways for this program to get into the target computer because it is created with sophisticated technology and has the ability to make full use of security vulnerabilities in Windows operating systems. And the most common way it accesses the computer is by bundling with other programs you have intention to download. Also it may enter compromised systems when you open spam email attachments. This PUP can display tons of disturbing ads in all sorts of forms on your screen like pop-up, banner, in-text and link ads once it is downloaded. It only gives users annoyance so there is no reason for you to keep it stay on the PC.Once PUP.Optional.SavePass.A gets installed, it is known to generate numerous pop-up ads. Those ads are usually related to coupons, deals and other misleading information like saying your computer status is risk or your disk memory is low etc. People who distribute this PUP aim to generate web traffic to third parties websites and collect sales leads. Users should never click on those pop-up ads and links that come out of nowhere, because it can mislead you to unknown and harmful web site. It can get your computer seriously infected. PUP is not like other legitimate programs so the removal will be more difficult because it won’t be shown in control panel. Even though antivirus programs like Malwarebytes indicates it has been removed, but once you reboot the computer it comes back immediately. Even in safe mode with networking it does the same thing. As mentioned above, we can see the traits of PUP.Optional.SavePass.A can always harm your entire system and make it in poor condition, therefore, to save your system for further trouble; PUP.Optional.SavePass.A should be deleted as soon as possible.
It can bypass the legit security tools and destroy your computer secretly.
It prevents you from opening some application because the files are corrupted.
It can make your browser redirected to all kinds of malicious websites.
It is able to allow remote hacker access the compromised system for illicit purpose.
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious pop-ups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Note: No matter how the virus accesses your PC, users should know that there are no tools can remove this pesky Trojan automatically at this moment, it is suggested users not spend much time in downloading or paying any security software which claims can delete this stubborn virus. It is totally useless. To completely get rid of PUP.Optional.SavePass.A, professional manual guide is needed.
Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.
1. End the malicious process from Task Manager.
Once PUP.Optional.SavePass.A virus is installed, computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.
(The name of the virus process can be random.)
Press Ctrl+Shift+Esc to quickly bring up Task Manager Window：
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.
Then a Registry Editor window will pop up as the following picture shows:
b. Search malicious files and registry entries and then remove all of them:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Temp
PUP.Optional.SavePass.A is tricky and malicious that should be removed at once. Through this PUP, pop-ups or ads can be displayed on your web browser frequently and it may redirect you to unwanted sites or pages that have questionable content. It also can hijack your browser and record all your browsing activity that may include your financial data such as banking info, credit card details and many more, eventually it could transfer the collected information to remote hackers without your knowledge. PUP.Optional.SavePass.A primarily installs on a computer along with third-party software and files such as freeware, shareware, torrents, and codecs. To avoid its installation, you have to pay more attention when you are about to download things from the Internet. Always choose custom installation and remember to untick things you don’t need to make sure you won’t get your computer settings changed.
Note: If you are not knowledgeable enough to be able to distinguish the location of this virus, or you are afraid of making mistake during the manual removal, please contact experts from Yoocare Online Tech Support for further help.
Published by & last updated on August 2, 2014 2:27 am
Leave a Reply
You must be logged in to post a comment.