Remove PUP.Optional.SearchProtect.A that Comes Back A Lot

OUTLINE

• PUP.Optional.SearchProtect.A’s features
• PUP.Optional.SearchProtect.A’s definition
• Dangers from PUP.Optional.SearchProtect.A
• Removal thread for PUP.Optional.SearchProtect.A
• How one ends up with PUP.Optional.SearchProtect.A?

PUP.Optional.SearchProtect.A’s Features

1. PUP.Optional.SearchProtect.A supports Search Protect by Conduit.
2. PUP.Optional.SearchProtect.A is not technically a virus but able to trigger unpleasant scenarios:
   a. would incur relentless popup ads.
   b. would incur browser hijack or redirect.
   c. would install additional web applications without permission.

What Is PUP.Optional.SearchProtect.A?

It would be a little bit disappointed that PUP.Optional.SearchProtect.A is not a virus, which means that security utilities cannot help remove it and resolve the incidental problems. The item is categorized as PUP (potentially unwanted program). The term was specially created to describe the items with potential dangers. Therefore, it is recommended to take actions against PUP.Optional.SearchProtect.A upon its detection and nip any possibility to be taken advantage by infections in the bud.

PUP.Optional.SearchProtect.A Is Potentially Dangerous?

What PUP.Optional.SearchProtect.A employs are BHO and JS techniques with slight modification. Such modification could make it possible that any access to it would automatically be preloaded into the connected machine and that the hijacking would last say permanently. As an application working for SEM, it needs large sum of traffic and make it flow in circle, which makes sense why some more web applications (such as toolbar and pop-up ads) will be detected along with PUP.Optional.SearchProtect.A.

As a consequence, more cache will be generated, more space will be taken up to make a sluggish machine. Such changes on browser would make internal processes, take explorer.exe for example, busy. This distraction could weaken the coordination in security services. What’s more, to obtain more traffic rapidly and achieve the goal of making profitable income out of it, PUP.Optional.SearchProtect.A and the similar PUP applications have long been found not to filter out suspicious and loosely built items. This would give a fat chance for whatever infection that find the bug/vulnerability.

Once PUP.Optional.SearchProtect.A is captured by infections or the machine harassed by PUP.Optional.SearchProtect.A is attacked by virus thereafter, BHO and JS techniques will be utilized to:

1. Preload vicious codes into system configuration and help with automatic run at each Windows start.
2. Record confidential information, log-in credentials particularly.

It is not wise to neglect PUP.Optional.SearchProtect.A issues or remove it incompletely. Below is the instruction to follow up. If you are not that computer savvy, you are welcome to get specialized technical help from Global PC Support Center.

Removal Thread to Remove PUP.Optional.SearchProtect.A

1. Unveil all hidden files and folders to remove the ones related to PUP.Optional.SearchProtect.A.

Windows 8
Start screen > open any folder > open Windows Explorer > select View tab > Tick ‘File name extensions’ and ‘Hidden items’ options.

Windows 7/XP/Vista
Click open ‘Control Panel’ > search for ‘Folder Options’ > tap View tab > tick ‘Show hidden files and folders' and non-tick 'Hide protected operating system files (Recommended)’.

a. navigate to the following directories and remove them.

C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe
C:\Users\[user name]\AppData\Roaming\SearchProtect\bin\cltmng.exe
C:\Program Files (x86)\SearchProtect\bin\msvcp100.dll
C:\Users\[user name]\AppData\Roaming\SearchProtect\bin\FirefoxModule.dll
C:\Users\[user name]\AppData\Roaming\SearchProtect\bin\ChromeModule.dll
C:\Users\[user name]\AppData\Roaming\SearchProtect\bin\InternetExplorerModule.dll
C:\Users\[user name]\AppData\Roaming\SearchProtect\bin\msvcp100.dll
C:\Users\[user name]\AppData\Local\Temp\
C:\Program Files (x86)\SearchProtect\Dialogs
C:\Users\santiago\AppData\Roaming\SearchProtect\
C:\Windows\System32\config\systemprofile\AppData\Roaming\SearchProtect\
C:\Users\[user name]\AppData\Roaming\SearchProtect\Dialogs
C:\Windows\System32\config\systemprofile\AppData\Roaming\SearchProtect\

b. navigate to the following direcoties to remove  every files and folders created on the day when PUP.Optional.SearchProtect.A was firstly detected.

C:\windows\winstart.bat
C:\windows\wininit.ini
C:\windows\Autoexec.bat
C:\Windows\system32\Temp

2. Go to Regedit and manage database there to remove the ones related to PUP.Optional.SearchProtect.A.

Windows 8
Move your mouse over lower right screen to get charms bar and type ‘regedit’/‘regedit.exe’, then hit Enter key.

Windows 7/XP/Vista
Access Start menu to select Run; then type ‘regedit’ and hit Enter key.

navigate to the following entries respectively and find and remove suspicious key value started with “Run” and delete accordingly.

HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SearchProtectAll
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SearchProtect
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SearchProtect

3. Search for and remove the items related to PUP.Optional.SearchProtect.A.

Click open random folder and hit on Search icon, type "PUP.Optional.SearchProtect.A" in all the search blanks and hit Enter button so as to remove all the detection.

How PUP.Optional.SearchProtect.A Spreads?

PUP.Optional.SearchProtect.A is created to help with online product promotion. Therefore, the world wide web is the major place to start. One should be extremely cautious when trying some recently published web applications, freeware/shareware. Please always give priority to custom installation method so as to reject the installation of bundled items.

It should be widely informed that the extension or the related items are not necessarily named after PUP.Optional.SearchProtect.A. One should pay attention to the items created on the date when PUP.Optional.SearchProtect.A was firstly detected and remove them, especially the ones that you don’t know of. This requires certain level of computer knowledge and skills. Should you run into difficulty and don’t know how to proceed, please do feel free to get exclusive help according to your concrete situation.

Reference:

http://blog.vilmatech.com/pup-optional-searchprotect-removed-expert-shows-way/