Malwarebytes Blog - http://blog.malwarebytes.org/security-threat/2014/05/fake-malwarebytes-anti-malware-2-0-abound/
We already started seeing executable files purporting to be free versions of our product being hosted on unfamiliar sites – some are bundles, and others are fakes which lead to things such as survey scams.
These are all potentially unwanted programs (PUPs), meaning they’re not really malware, but they exhibit behaviours that we find questionable (and some folks would argue certain behaviours are potentially malicious). Here are our detections for the following files:
Continue reading
We already started seeing executable files purporting to be free versions of our product being hosted on unfamiliar sites – some are bundles, and others are fakes which lead to things such as survey scams.

These are all potentially unwanted programs (PUPs), meaning they’re not really malware, but they exhibit behaviours that we find questionable (and some folks would argue certain behaviours are potentially malicious). Here are our detections for the following files:
- SHA256: 21b20d3f928e4b9f357d097861f8cad9f3b083dcba7b0d32b01093d886f6f771
- Detected as: PUP.Optional.InstallCore (12/52)
- SHA256: b2e1f59116eb9cf95b28a3d1067d232b46048af28cca8d7787048f64f39b1753
- Detected as: PUP.Optional.InstallCore.A (11/50)
- SHA256: ee6be90a13685eccda4cf2387ffa3e83c37d6b0a406bbd6ec8eeeb7620e75ab8
- Detected as: PUP.Optional.InstallCore.A (20/51)
- SHA256: dbe1e668c759bf12b8cb00a0e4fdc5bddbe5aef9cb9ec575a24da93229e54bbc
- Detected as: PUP.Optional.AppsInstaller (14/52)
Continue reading