PUP.Optional.PCAcceleratePro is Malwarebytes’ detection name for system optimizer aimed at Windows systems called PC Accelerate Pro.
Users of affected systems may see popups like these:
and they may notice this entry in their list of installed Programs and Features:
PUP.Optional.PCAcceleratePro is a system optimizer. These so-called “system optimizers” use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
PUP.Optional.PCAcceleratePro is usually installed by users themselves under false pretences.
Malwarebytes protects users from PUP.Optional.PCAcceleratePro by using real-time protect
Malwarebytes can detect and remove PUP.Optional.PCAcceleratePro without further user interaction.
A Malwarebytes log of removal will look similar to this:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 7/21/2016 Scan Time: 9:04 AM Logfile: mbamPCaccelerate.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.07.20.11 Rootkit Database: v2016.05.27.01 License: Premium Malware Protection: Disabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username} Scan Type: Threat Scan Result: Completed Objects Scanned: 315615 Time Elapsed: 9 min, 12 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 2 PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe, 3792, Delete-on-Reboot, [a8a3091d2c6ed3637c7edb079c65f40c] PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\InstantSupport.exe, 1492, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36] Modules: 2 PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\BrowserUtils.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\Scanner.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], Registry Keys: 8 PUP.Optional.InstantSupport, HKLM\SOFTWARE\CLASSES\CLSID\{48DED1A6-4444-43bA-AD0E-A9CEA7A51A5E}, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, HKLM\SOFTWARE\WOW6432NODE\InstantSupport, Quarantined, [3615ae78287261d53d414b8c18eb5aa6], PUP.Optional.PCAcceleratePro, HKLM\SOFTWARE\WOW6432NODE\PCAcceleratePro, Quarantined, [183347df613985b191f5a63159aaed13], PUP.Optional.InstantSupport, HKCU\SOFTWARE\InSTab, Quarantined, [3219cc5a5248122422a343b93fc4f50b], PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\PCAcceleratePro, Quarantined, [24271610613931054939b027d72c54ac], PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\ACPTAB, Quarantined, [f952e83ea5f5a19514476c91b2510bf5], PUP.Optional.InstantSupport, HKCU\SOFTWARE\INSTANTSUPPORT, Quarantined, [1e2d32f4801a3ef84d0732af4eb53bc5], PUP.Optional.PCAcceleratePro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PCAcceleratePro & Instant support, Quarantined, [242784a223775cda8edf8e35857d29d7], Registry Values: 5 PUP.Optional.PCAcceleratePro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PCAcceleratePro, "C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe" -startup, Quarantined, [a8a3091d2c6ed3637c7edb079c65f40c] PUP.Optional.InstantSupport, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|InstantSupport, "C:\Program Files (x86)\InstantSupport\InstantSupport.exe" -startup, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36] PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\ACPTAB|hb, 1, Quarantined, [f952e83ea5f5a19514476c91b2510bf5] PUP.Optional.InstantSupport, HKCU\SOFTWARE\INSTANTSUPPORT|Assistent, 0, Quarantined, [1e2d32f4801a3ef84d0732af4eb53bc5] PUP.Optional.PCAcceleratePro, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|PCAcceleratePro.exe, 8888, Quarantined, [76d50c1aa6f437ff299e22c1a65dc739] Registry Data: 0 (No malicious items detected) Folders: 10 PUP.Optional.InstantSupport, C:\Users\{username}\AppData\Roaming\InstantSupport, Quarantined, [e16adc4a9a00c670aebe99294ab931cf], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\languages, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantSupport, Quarantined, [3f0c66c003973600501b14afc33f34cc], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro, Delete-on-Reboot, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\database, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\Users\{username}\AppData\Roaming\PCAcceleratePro, Quarantined, [3f0c23035446cc6a99d34c7705fddd23], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\languages, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCAcceleratePro, Quarantined, [400b41e5f8a2eb4b91de348f19e9d52b], Files: 43 PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe, Delete-on-Reboot, [a8a3091d2c6ed3637c7edb079c65f40c], PUP.Optional.PCAcceleratePro, C:\Users\{username}\Desktop\pcinst.exe, Quarantined, [83c8b47274268caa8b6f4b97a06117e9], PUP.Optional.InstantSupport, C:\Users\{username}\AppData\Roaming\InstantSupport\InstantSupport.cfg, Quarantined, [e16adc4a9a00c670aebe99294ab931cf], PUP.Optional.InstantSupport, C:\Users\Public\Desktop\Instant Support.lnk, Quarantined, [68e32ef8c2d84fe785e8e4de4fb44cb4], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\1.txt, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\helper.exe, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\InstantSupport.exe, Delete-on-Reboot, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\InstantSupport64.dll, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\languages\english.lng, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.InstantSupport, C:\Program Files (x86)\InstantSupport\languages\russian.lng, Quarantined, [ee5d9e88d0ca0a2ca6c8af13689bca36], PUP.Optional.PCAcceleratePro, C:\Users\Public\Desktop\PCAcceleratePro.lnk, Quarantined, [f4579b8bfb9f6dc9bbc65e79758e41bf], PUP.Optional.InstantSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantSupport\Instant Support.lnk, Quarantined, [3f0c66c003973600501b14afc33f34cc], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\dwsm.dat, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\PCAccelerateProUpdater.conf, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\RPCAcceleratePro.conf, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\wsm.dat, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\ProgramData\PCAcceleratePro\database\mirrors.dat, Quarantined, [2e1d65c11b7f84b298d4dde6d1319a66], PUP.Optional.PCAcceleratePro, C:\Users\{username}\AppData\Roaming\PCAcceleratePro\PCAcceleratePro.cfg, Quarantined, [3f0c23035446cc6a99d34c7705fddd23], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libeay32.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\1.txt, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\ap.ico, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\BrowserUtils.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\data, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\driverhelper.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\driverhelper64.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\DriverInstallTool.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\DriverInstallToolx64.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\helper.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\ISSetup.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libav.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libssl32.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libunrar.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\libunrar_iface.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\msvcp110.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\msvcr110.dll, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAccelerateProAS.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\PCAccelerateProUpdater.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\RPCAcceleratePro.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\Scanner.dll, Delete-on-Reboot, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\uninstall.exe, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\languages\english.lng, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\Program Files (x86)\PCAcceleratePro\languages\russian.lng, Quarantined, [242784a223775cda8edf8e35857d29d7], PUP.Optional.PCAcceleratePro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCAcceleratePro\PCAcceleratePro.lnk, Quarantined, [400b41e5f8a2eb4b91de348f19e9d52b], Physical Sectors: 0 (No malicious items detected) (end)
Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Here’s how to do it.
If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access.
You may see these entries in FRST logs:
(Installer Technology) C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe (Installer Technology) C:\Program Files (x86)\InstantSupport\InstantSupport.exe HKLM-x32\...\Run: [PCAcceleratePro] => C:\Program Files (x86)\PCAcceleratePro\PCAcceleratePro.exe [8184128 2016-07-15] (Installer Technology) HKLM-x32\...\Run: [InstantSupport] => C:\Program Files (x86)\InstantSupport\InstantSupport.exe [5225792 2016-07-15] (Installer Technology) C:\Users\Public\Desktop\Instant Support.lnk C:\Users\Public\Desktop\PCAcceleratePro.lnk C:\Users\{username}\AppData\Roaming\PCAcceleratePro C:\Users\{username}\AppData\Roaming\InstantSupport C:\ProgramData\PCAcceleratePro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCAcceleratePro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantSupport C:\Program Files (x86)\InstantSupport C:\Program Files (x86)\PCAcceleratePro PCAcceleratePro & Instant support (HKLM-x32\...\PCAcceleratePro & Instant support) (Version: 1.0.23.2 - Installer Technology) () C:\Program Files (x86)\PCAcceleratePro\Scanner.dll () C:\Program Files (x86)\PCAcceleratePro\BrowserUtils.dll
PUP.Optional.InstantSupport
Select your language