Share via

Windows defender blocked but did not delete virus.

Anonymous
2022-11-25T22:15:24+00:00

PUABundler:Win32/ICBundler blocked by microsoft defender, but not deleted. Is my computer safe?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
  1. _AW_ 67,206 Reputation points Volunteer Moderator
    2022-11-26T01:33:45+00:00

    Hi Oskar, a PUA is just Potentially Unwanted Application, and judging by the detection it was a software installler that bundles other apps that may be foisted on you. Possibly a Torrent client. At what point did Defender block it? I assume that if it was at the download stage, then it was blocked and never got to the computer. If the installer was executed, then the PUA element of it would have been blocked from installing. Either way your computer is safe. If you have the installer, just delete it.

    3 people found this answer helpful.
    0 comments No comments
Answer accepted by question author
  1. Anonymous
    2022-11-29T09:37:49+00:00

    I searched my computer on lavasoft, and it turned out it was bundled with Anaconda. Deleted the temp folder and didn't find anything when I searched for "lavasoft" or "web companion".

    Thanks!

    2 people found this answer helpful.
    0 comments No comments
Answer accepted by question author
  1. _AW_ 67,206 Reputation points Volunteer Moderator
    2022-11-28T22:44:29+00:00

    It looks like Lavasoft adware known as Web Companion tried to install but was blocked. Just go to C:\Users\Oskar\Appdata\Local\Temp and delete everything - see if the file i4thh4fn.lnj exists.

    To read what Web Companion is: https://www.pcrisk.com/removal-guides/14231-web-companion-unwanted-application

    1 person found this answer helpful.
    0 comments No comments
Answer accepted by question author
  1. Anonymous
    2022-11-28T16:07:20+00:00

    I installed logi options + and logitech options. Four days later I got a notification from windows defender.

    I don't remember exaclty what I clicked but I think I clicked "remove" or "delete".

    Now I am left with this:

    (dutch translated to english: Detected: PUABundler..., Status: Failed, This threat or this app has possibly not fully been restored.

    Date: ...

    Details: This program exhibits potentially unwanted behavior

    items involved: File...

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. _AW_ 67,206 Reputation points Volunteer Moderator
    2022-11-29T10:02:10+00:00

    You're welcome.

    To help others with the same or similar issue, it would be greatly appreciated if you could mark the thread as answered by pressing Yes below the post that provided the solution.

    Good luck!

    1 person found this answer helpful.
    0 comments No comments