PUP.IBryte found by MalwareBytes

Hi…I have Avast Internet Security

MBAM just found PUP.IBryte…what is this??

I have not removed it yet from the MBAM scan - want to ask you if there are any potential harm and steps further to take?
Thank you!

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.05.08.06

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
xxxxxxxxxxxxxxxadministrator]

08/05/2013 3:36:57 PM
MBAM-log-2013-05-08 (16-23-36).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 212438
Time elapsed: 14 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\xxxxxxx\Downloads\44A9.tmp (PUP.IBryte) → No action taken.

(end)

PUP = not a virus/ Possible Unwanted Program
IBryte is some adware crap that will display ads when you browse

also the log say no action taken, so run again and click remove selected

i recomend you also run AdwCleaner to remove any crap files from your browser. run it and click delete
you may post log here
you find it here. http://forum.avast.com/index.php?topic=53253.0

Thank you …will do Pondus!

Pondus

ADwCleaner log attached

Pondus…I forgot to remove the iBryte from the MBAM

I must rescan MBAM and remove and then do the ADw cleaner again?

only MBAM…update it, run quick scan…if still detected click remove selected

OK new updated MBAM is clean (not attaching)

thank you for your prompt help!

Should I… how do I set my Avast to detect such PUP??

avast is a bit more strickt in its PUP detection… it will for eksempel class many factory installed programs from hp / Dell / Thosiba as PUP because of what they can do…programs that can be good or bad if abused
so when using avast PUP scan you need to know what it is before you remove it, and i Guess that is why it is default off in quick/full scan

i recomend you stay With default avast settings and run a weekly quick scan With avast and Malwarebytes, remeber to update MBAM before you scan as they can have 10 updates released a day

Thank you Pondus

…I did a full Avast scan after removing the iBryte from MBAM
but last night Avast found the iBryte again…is now in virus chest
…this morning I update quick scanned with MBAM again and clean

not sure why it was found again after removing

I originally scanned due to an advertisement was following me around and appearing everywhere I went on the internet,

Is this iBryte a difficult one to remove??

see the guide here… http://forum.avast.com/index.php?topic=53253.0
scroll Down to OTL…follow instruction and attach (not copy and paste) the diagnostic log

Essexboy wil then have a look and check for any leftover files that need to be removed

OK thank you

Essexboy
Thank you
here are the OTL logs attached

Looks nice and clean, have all the problems gone ?

Thanks Essexboy!

I am thinking that the advertisement that is following me is google related maybe part of their adwords

Am relieved to get your all OK blessing …many thanks as always!

Karen

No problem Avast probably found an orphan file ;D

Run OTL and press the cleanup button to remove it and its associated files

will do …
cheers!