PUP.Optional.PCAcceleratePro is Malwarebytes' detection name for system optimizer aimed at Windows systems called PC Accelerate Pro.
Users of affected systems may see popups like these:
and they may notice this entry in their list of installed Programs and Features:
PUP.Optional.PCAcceleratePro is a system optimizer. These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems. PUP.Optional.PCAcceleratePro is usually installed by users themselves under false pretences.
Malwarebytes can detect and remove PUP.Optional.PCAcceleratePro without further user interaction.
A Malwarebytes log of removal will look similar to this:
Malwarebytes Anti-Malware www.malwarebytes.orgScan Date: 7/21/2016 Scan Time: 9:04 AM Logfile: mbamPCaccelerate.txt Administrator: YesVersion: 2.2.1.1043 Malware Database: v2016.07.20.11 Rootkit Database: v2016.05.27.01 License: Premium Malware Protection: Disabled Malicious Website Protection: Enabled Self-protection: Enabled
OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username}
Scan Type: Threat Scan Result: Completed Objects Scanned: 315615 Time Elapsed: 9 min, 12 sec
Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled
Processes: 2 PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe, 3792, Delete-on-Reboot, [a8a3091d2c6ed3637c7edb079c65f40c] PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\InstantSupport.exe, 1492, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36]
Modules: 2 PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\BrowserUtils.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\Scanner.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7],
Registry Keys: 8 PUP.Optional.InstantSupport, HKLM\SOFTWARE\CLASSES\CLSID\{48DED1A6-4444-43bA-AD0E-A9CEA7A51A5E}, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, HKLM\SOFTWARE\WOW6432NODE\InstantSupport, Quarantined, [3615ae78287261d53d414b8c18eb5aa6], PUP.Optional.PCAcceleratePro, HKLM\SOFTWARE\WOW6432NODE\PCAcceleratePro, Quarantined, [183347df613985b191f5a63159aaed13], PUP.Optional.InstantSupport, HKCU\SOFTWARE\InSTab, Quarantined, [3219cc5a5248122422a343b93fc4f50b], PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\PCAcceleratePro, Quarantined, [24271610613931054939b027d72c54ac], PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\ACPTAB, Quarantined, [f952e83ea5f5a19514476c91b2510bf5], PUP.Optional.InstantSupport, HKCU\SOFTWARE\INSTANTSUPPORT, Quarantined, [1e2d32f4801a3ef84d0732af4eb53bc5], PUP.Optional.PCAcceleratePro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PCAcceleratePro & Instant support, Quarantined, [242784a223775cda8edf8e35857d29d7],
Registry Values: 5 PUP.Optional.PCAcceleratePro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PCAcceleratePro, "C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe" -startup, Quarantined, [a8a3091d2c6ed3637c7edb079c65f40c] PUP.Optional.InstantSupport, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|InstantSupport, "C:\Program Files (x86)\InstantSupport\InstantSupport.exe" -startup, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36] PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\ACPTAB|hb, 1, Quarantined, [f952e83ea5f5a19514476c91b2510bf5] PUP.Optional.InstantSupport, HKCU\SOFTWARE\INSTANTSUPPORT|Assistent, 0, Quarantined, [1e2d32f4801a3ef84d0732af4eb53bc5] PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|PCAcceleratePro.exe, 8888, Quarantined, [76d50c1aa6f437ff299e22c1a65dc739]
Registry Data: 0 (No malicious items detected)
Folders: 10 PUP.Optional.InstantSupport, C:\Users\{username}\AppData\Roaming\InstantSupport, Quarantined, [e16adc4a9a00c670aebe99294ab931cf], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\languages, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantSupport, Quarantined, [3f0c66c003973600501b14afc33f34cc], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro, Delete-on-Reboot, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\database, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\Users\{username}\AppData\Roaming\PCAcceleratePro, Quarantined, [3f0c23035446cc6a99d34c7705fddd23], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\languages, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCAcceleratePro, Quarantined, [400b41e5f8a2eb4b91de348f19e9d52b],
Files: 43 PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe, Delete-on-Reboot, [a8a3091d2c6ed3637c7edb079c65f40c], PUP.Optional.PCAcceleratePro, C:\Users\{username}\Desktop\pcinst.exe, Quarantined, [83c8b47274268caa8b6f4b97a06117e9], PUP.Optional.InstantSupport, C:\Users\{username}\AppData\Roaming\InstantSupport\InstantSupport.cfg, Quarantined, [e16adc4a9a00c670aebe99294ab931cf], PUP.Optional.InstantSupport, C:\Users\Public\Desktop\Instant Support.lnk, Quarantined, [68e32ef8c2d84fe785e8e4de4fb44cb4], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\1.txt, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\helper.exe, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\InstantSupport.exe, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\InstantSupport64.dll, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\languages\english.lng, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\languages\russian.lng, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.PCAcceleratePro, C:\Users\Public\Desktop\PCAcceleratePro.lnk, Quarantined, [f4579b8bfb9f6dc9bbc65e79758e41bf], PUP.Optional.InstantSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantSupport\Instant Support.lnk, Quarantined, [3f0c66c003973600501b14afc33f34cc], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\dwsm.dat, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\PCAccelerateProUpdater.conf, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\RPCAcceleratePro.conf, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\wsm.dat, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\database\mirrors.dat, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\Users\{username}\AppData\Roaming\PCAcceleratePro\PCAcceleratePro.cfg, Quarantined, [3f0c23035446cc6a99d34c7705fddd23], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libeay32.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\1.txt, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\ap.ico, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\BrowserUtils.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\data, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\driverhelper.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\driverhelper64.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\DriverInstallTool.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\DriverInstallToolx64.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\helper.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\ISSetup.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libav.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libssl32.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libunrar.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libunrar_iface.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\msvcp110.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\msvcr110.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAccelerateProAS.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAccelerateProUpdater.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\RPCAcceleratePro.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\Scanner.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\uninstall.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\languages\english.lng, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\languages\russian.lng, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCAcceleratePro\PCAcceleratePro.lnk, Quarantined, [400b41e5f8a2eb4b91de348f19e9d52b],
Physical Sectors: 0 (No malicious items detected)
(end)
Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Here’s how to do it.
You may see these entries in FRST logs:
(Installer Technology) C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe (Installer Technology) C:\Program Files (x86)\InstantSupport\InstantSupport.exe HKLM-x32\...\Run: [PCAcceleratePro] => C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe [8184128 2016-07-15] (Installer Technology) HKLM-x32\...\Run: [InstantSupport] => C:\Program Files (x86)\InstantSupport\InstantSupport.exe [5225792 2016-07-15] (Installer Technology) C:\Users\Public\Desktop\Instant Support.lnk C:\Users\Public\Desktop\PCAcceleratePro.lnk C:\Users\{username}\AppData\Roaming\PCAcceleratePro C:\Users\{username}\AppData\Roaming\InstantSupport C:\ProgramData\PCAcceleratePro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCAcceleratePro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantSupport C:\Program Files (x86)\InstantSupport C:\Program Files (x86)\PCAccelerateProPCAcceleratePro & Instant support (HKLM-x32\...\PCAcceleratePro & Instant support) (Version: 1.0.23.2 - Installer Technology) () C:\Program Files (x86)\PCAcceleratePro\Scanner.dll () C:\Program Files (x86)\PCAcceleratePro\BrowserUtils.dll
PUP.Optional.InstantSupport
Select your language