Malwarebytes can detect and remove PUP.Optional.MorePowerfulCleaner without further user interaction.
A Malwarebytes log of removal will look similar to this:
Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date:9/22/2016Scan Time:11:12AMLogfile:mbamMyPCBackup.txtAdministrator:YesVersion:2.2.1.1043Malware Database:v2016.09.22.07Rootkit Database:v2016.08.15.01License:PremiumMalware Protection:DisabledMalicious Website Protection:EnabledSelf-protection:EnabledOS:Windows 7Service Pack 1CPU:x64File System:NTFSUser:{username}Scan Type:Threat ScanResult:CompletedObjects Scanned:321533Time Elapsed:8min,44secMemory:EnabledStartup:EnabledFilesystem:EnabledArchives:EnabledRootkits:EnabledHeuristics:EnabledPUP:EnabledPUM:EnabledProcesses:1PUP.Optional.MyPCBackup,C:\Program Files (x86)\OLBPre\OLBPre.exe,2632,Delete-on-Reboot,[0f202b4aecaef2443ad9fc94e21fce32]Modules:0(Nomalicious items detected)Registry Keys:3PUP.Optional.MyPCBackup,HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OLBPre,Quarantined,[50dfacc9e0ba85b13fc96fddce364bb5],PUP.Optional.MyPCBackup,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{33A0B791-213F-48AD-AC7D-989EE32023B7},Delete-on-Reboot,[41ee066fb4e6181ef873529dd23157a9],PUP.Optional.MyPCBackup,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\LaunchPreSignup,Delete-on-Reboot,[45ead79eebaf92a40ed0aefe9370d62a],Registry Values:2PUP.Optional.MyPCBackup,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{33A0B791-213F-48AD-AC7D-989EE32023B7}|Path,\LaunchPreSignup,Delete-on-Reboot,[41ee066fb4e6181ef873529dd23157a9]PUP.Optional.MyPCBackup,HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OLBPRE|DisplayName,MyPC Backup ,Quarantined,[3bf480f59ffb73c3a79ace142fd435cb]Registry Data:0(Nomalicious items detected)Folders:1PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre,Delete-on-Reboot,[8ea10c69d0ca3cfa073a8a26cb3820e0],Files:15PUP.Optional.MyPCBackup,C:\Program Files (x86)\OLBPre\OLBPre.exe,Delete-on-Reboot,[0f202b4aecaef2443ad9fc94e21fce32],PUP.Optional.MyPCBackup,C:\Users\{username}\Desktop\setup.exe,Quarantined,[d55a6312653501356ca7cfc1976aa55b],PUP.Optional.MyPCBackup,C:\Program Files (x86)\OLBPre\uninst.exe,Quarantined,[50dfacc9e0ba85b13fc96fddce364bb5],PUP.Optional.MyPCBackup,C:\Users\{username}\Desktop\MyPC Backup.lnk,Quarantined,[44eb0a6b9bff1d19e5f4ddcf2cd77d83],PUP.Optional.MyPCBackup,C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk,Quarantined,[2609d3a27b1f76c0f4e76349db28a957],PUP.Optional.MyPCBackup,C:\Windows\System32\Tasks\LaunchPreSignup,Quarantined,[9e910f663f5b4fe7c01c7d2f2fd450b0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\OLBPre.exe.config,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\brand.jdat,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\de_DE.mo,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\es_ES.mo,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\fr_FR.mo,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\it_IT.mo,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\LinqBridge.dll,Delete-on-Reboot,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\pt_PT.mo,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],PUP.Optional.PreBackup,C:\Program Files (x86)\OLBPre\state.jdat,Quarantined,[8ea10c69d0ca3cfa073a8a26cb3820e0],Physical Sectors:0(Nomalicious items detected)(end)
Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Here’s how to do it.
You may see these entries in FRST logs:
(DotC United Inc)C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe (DotC United Inc)C:\Program Files (x86)\MPC Cleaner\MPCTray.exe (DotC United Inc)C:\Program Files (x86)\MPC Cleaner\AdCleaner.exe (DotC United Inc)C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe (DotC United Inc)C:\Program Files (x86)\MPC Cleaner\MPC.exe (DotC United Inc)C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe (DotC United Inc)C:\Program Files (x86)\MPC Cleaner\AdxEngine.exe HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =search.mpc.am/?geo={countrycode}HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =search.mpc.am/?geo={countrycode}HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =search.mpc.am/?geo={countrycode}HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =search.mpc.am/?geo={countrycode}HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =search.mpc.am/?geo={countrycode}FF Homepage:search.mpc.am CHR HomePage:Default ->search.mpc.am CHR StartupUrls:Default ->"search.mpc.am"R2 MPCProtectService;C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [3558082016-09-01](DotC United Inc)R1 MPCKpt;C:\Windows\System32\DRIVERS\MPCKpt.sys [601362016-09-01](DotC United Inc)C:\Users\Metallica\AppData\Roaming\MCorp (DotC United Inc)C:\Windows\system32\Drivers\MPCKpt.sys C:\Program Files (x86)\MPC CleanerC:\Users\Public\Desktop\MPC Desktop.lnk C:\Users\Public\Desktop\MPC AdCleaner.lnk C:\Users\Public\Desktop\MPC Cleaner.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC DesktopC:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC AdCleanerC:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPCMPC Cleaner (HKLM-x32\...\MPC)(Version:-DotC United Inc)()C:\Program Files (x86)\MPC Cleaner\zlib1.dll
Select your language