Adware.WhiteClick is Malwarebytes' detection name for a small family of bundled installers that install PUP.Optional.WhiteClick.
Adware.WhiteClick is usually part of a bundler that also installs other adware and potentially unwanted programs (PUPs). This adware installs PUP.Optional.WhiteClick.
Malwarebytes can detect and remove Adware.WhiteClick without further user interaction.
A Malwarebytes log of removal will look similar to this:
Malwarebytes www.malwarebytes.com-Log Details- Scan Date: 1/7/19 Scan Time: 9:13 AM Log File: 27e2b56c-1254-11e9-85a6-00ffdcc6fdfc.json
-Software Information- Version: 3.6.1.2711 Components Version: 1.0.482 Update Package Version: 1.0.8665 License: Premium
-System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username}
-Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 236229 Threats Detected: 62 Threats Quarantined: 62 Time Elapsed: 2 min, 56 sec
-Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect
-Scan Details- Process: 0 (No malicious items detected)
Module: 0 (No malicious items detected)
Registry Key: 1 PUP.Optional.WhiteClick, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{489D7C27-8DD5-45BF-96C8-A8C56F5B0554}, Quarantined, [5071], [538662],1.0.8665
Registry Value: 1 PUP.Optional.WhiteClick, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{489D7C27-8DD5-45BF-96C8-A8C56F5B0554}|DISPLAYNAME, Quarantined, [5071], [538662],1.0.8665
Registry Data: 0 (No malicious items detected)
Data Stream: 0 (No malicious items detected)
Folder: 10 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\System Images, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\0, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\1, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\2, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\3, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\4, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\5, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\USERS\{username}\APPDATA\LOCAL\WHITECLICK, Quarantined, [5071], [538656],1.0.8665
File: 50 PUP.Optional.WhiteClick, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SHORTCUT TO PRIMARY OUTPUT FROM START (ACTIVE).LNK, Quarantined, [5071], [543347],1.0.8665 PUP.Optional.WhiteClick, C:\USERS\{username}\APPDATA\LOCAL\WHITECLICK\ACTIVE-SEARCH.ICO, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\afisha.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\auto.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\aw.my.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\bing.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\e.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\facebook.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\horo.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\instagram.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\linkedin.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\my.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\news.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\ok.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\otvet.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\pogoda.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\rev.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\ru.aliexpress.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\sport.mail.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\twitter.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\vk.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\warface.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\warface.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\warthunder.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\warthunder.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\worldoftanks.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\worldoftanks.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\worldofwarships.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\worldofwarships.ru.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Images\youtube.com.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\System Images\add_tab.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\System Images\loupe.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\System Images\question_mark.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\System Images\right-arrow.png, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\0\Settings.ini, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\1\Settings.ini, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\2\Settings.ini, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\3\Settings.ini, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\4\Settings.ini, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Tabs\5\Settings.ini, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\License.rtf, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Newtonsoft.Json.dll, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\Start.exe, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\System.Net.Http.dll, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\WebClient.dll, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\WhiteClick.dll, Quarantined, [5071], [538656],1.0.8665 PUP.Optional.WhiteClick, C:\Users\{username}\AppData\Local\WhiteClick\WhiteClick.InstallState, Quarantined, [5071], [538656],1.0.8665 Adware.WhiteClick, C:\USERS\{username}\DESKTOP\SETUP.EXE, Quarantined, [2672], [613209],1.0.8665 Adware.WhiteClick, C:\WINDOWS\INSTALLER\9B1D3.MSI, Quarantined, [2672], [556015],1.0.8665
Physical Sector: 0 (No malicious items detected)
WMI: 0 (No malicious items detected)
(end)
Select your language