PCAppStore folder, with files therein, has installed itself on my Acer laptop. I use OS MS Edge. I use Norton 360 Platinum Plus 1 and Norton Utilities. All are updated automatically, and system scanned regularly. I have located where this folder is on my laptop. But I want a Norton expert to delete the files. Oddly Norton doesn't seem to be aware of this application. Normal uninstall processes do not work because this application is not shown in installed files list. Can anybody suggest a safe uninstall process?
further as test: Windows Security
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=PUAAdvertising%3AWin32%2FPCAppStore&threatid=368759
File: Setup.exe
File size: 120 KB (123,048 bytes)
MD5 checksum: F3FB1C9541940C2E5A37A41CD4DC82A9
SHA256 checksum: 36041F1BA60AB29B769921AD6C1F02EB4F836D94AD5F155230132AE2E7856B10
Date/Time: 11/19/2023
15 security vendors flagged this file as malicious
36041f1ba60ab29b769921ad6c1f02eb4f836d94ad5f155230132ae2e7856b10
Setup.exe
https://www.virustotal.com/gui/file/36041f1ba60ab29b769921ad6c1f02eb4f836d94ad5f155230132ae2e7856b10
FWIW!! Having MS do a system reset was a "last resort" solution from where I sit. Taking the least destructive and risk. Having Malwarebytes remove this PUP, would have been a better road to have taken. MBAM is a trusted source alongside Norton, well established here on the community forums. It removes malware that Norton doesn't focus on due to Norton, primarily focusing on protection of the OS.
SA
further as test:
restore/exclude Uninstaller.exe from Quarantine => ran Uninstaller.exe
PC App Store uninstalled from Start Menu
Norton objected to uninstall Setup trying to call home.
as test: changed Block to Allow and ran Uninstaller.exe again.
Note: NPE Full System Scan = No Threats Found
Note: AppData\Local\ files remained.
Note: Typical (Recommended) install is AppData\Local\
Norton does not object to:
Filename: AutoUpdater.exe
Full Path: C:\Users\user\PCAppStore\AutoUpdater.exe
Developers
Fast Corporate LTD
Version
1.0.0.1067
Identified
11/17/2023
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Good
Norton has given this file a favorable rating.
File Thumbprint - SHA:
7529a4fb0e0dc2d9d0d1f3377e55caba06350e7fb33a9ab6dacc222eaf7f6217
File Thumbprint - MD5:
13056d97ee4078d09727f0e4e0311099
Filename: PCAppStore.exe
Full Path: C:\Users\user\PCAppStore\PCAppStore.exe
Developers
Fast Corporate LTD
Version
1.0.0.1067
Identified
11/17/2023
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Good
Norton has given this file a favorable rating.
File Thumbprint - SHA:
3b4e26eba1294f12990b67daa15a2618528fc76d62321ef1b3b8a6d6090df46f
File Thumbprint - MD5:
afabb61d90cc290b94fc1132f7ff8039
Caveat: I've no experience with Fast Corporate LTD products.
as always, your mileage may vary
follow up: and now
Norton objects to Uninstaller.exe
Filename: Uninstaller.exe
Threat name: PUA.Gen.2 Full Path: C:\Users\user\PCAppStore\Uninstaller.exe
On computers as of
11/17/2023 at 10:25:29 AM
Last Used
11/17/2023 at 10:27:29 AM
Threat type: Security Risk. Programs that pose a security or privacy risk and are not already classified as malicious.
Uninstaller.exe Threat name: PUA.Gen.2
Few Users
Hundreds of users in the Norton Community have used this file.
Mature
This file was released 1 month ago.
Low
This file risk is low.
Source: External Media
Source File: Uninstaller.exe
Infected file: C:\Users\bjm\PCAppStore\Uninstaller.exe No fix attempted
File Thumbprint - SHA:
4aaaa24936a5901cefc8d1cc6c5afa628ae2aed6074c0af2340f3e5cadaa61bc
File Thumbprint - MD5:
fed5374718ce94c68031ec7a0be4d874
as test: pcappstore.com - Download Free
https://pcapp.store/tos.html
https://pcapp.store/privacy.html
https://pcappstore.com/?p=lpd_appstore-faq
30 security vendors flagged this file as malicious
072031d351392605259dbf7d724bcc0715cd3def10c3357b126f195fe849cb73
Setup.exeMalwarebytes Neshta.Virus.FileInfector.DDS
https://www.malwarebytes.com/blog/detections/neshta-virus-fileinfector-dds
Malwarebytes Premium 5 objected
Malwarebytes Browser Guard objected
__________________________________________________________________________________________________
Norton Safe Web noted Caution
__________________________________________________________________
Caveat:
@Jrogers PC App Store is likely not my as test: PC App Store
bottom line:
Malwarebytes Premium & Malwarebytes Browser Guard offered objections.
Malwarebytes Adopts Aggressive PUP Policy
https://www.malwarebytes.com/blog/news/2013/07/malwarebytes-adopts-aggressive-pup-policy
Norton Safe Web noted Caution
Norton 360 was silent.
as always, your mileage may vary
Edit:
45 security vendors flagged this file as malicious
d279aaad3cc16e9f5db38aafaf5248d671898d9dcd8e5e2274521b99eaca468f
PCAppStore.exeMalwarebytes PUP.Optional.VeryFast
https://www.virustotal.com/gui/file/d279aaad3cc16e9f5db38aafaf5248d671898d9dcd8e5e2274521b99eaca468f
https://www.malwarebytes.com/blog/detections/pup-optional-veryfast
Jrogers:The Company is: Fast Corporate LTD.
- https://community.norton.com/en/comment/8549093#comment-8549093
- https://community.norton.com/en/comment/8549095#comment-8549095
btw ~ the Fast Corporation LTD examples that were posted:
30 security vendors flagged this file as malicious
072031d351392605259dbf7d724bcc0715cd3def10c3357b126f195fe849cb73
Setup.exeMalwarebytes Neshta.Virus.FileInfector.DDS
https://www.virustotal.com/gui/file/072031d351392605259dbf7d724bcc0715cd3def10c3357b126f195fe849cb73
https://www.malwarebytes.com/blog/detections/neshta-virus-fileinfector-dds
45 security vendors flagged this file as malicious
d279aaad3cc16e9f5db38aafaf5248d671898d9dcd8e5e2274521b99eaca468f
PCAppStore.exe
https://www.virustotal.com/gui/file/d279aaad3cc16e9f5db38aafaf5248d671898d9dcd8e5e2274521b99eaca468f
btw ~ Norton Safe Web
https://safeweb.norton.com/report/show?url=https://pcapp.store = Caution => Potentially Unwanted Software
btw ~ Malwarebytes Browser Guard
fwiw ~ as MalwareTips DIY Guide informs [here] and as @SoulAsylum shared.
PC App Store is installed by the users, whether that is knowingly or not. Often, this type of program is offered through advertisements, cracks for games, or bundled with other software, leaving the user puzzled about where this software came from.
Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed PC App Store without your knowledge.
You should always pay attention when installing software because often, a software installer includes optional installs. Be very careful what you agree to install.
Always opt for the custom installation and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place. It goes without saying that you should not install software that you don’t trust.
Jrogers:Nov1723: Thanks for this SA. However I wanted to stay with trustworthy Norton processes. I finally was able to delete PCAppStore folder and the many sub-folders and files manually. How? Microsoft Support reset my laptop. Unfortunately this reset also removed many of my useful apps, including Norton. So I'm now reinstalling those useful apps. Norton was a disappointment. And my solution is very clumsy, but.
Respectfully, may I ask: Did you review: PC App Store thread.
https://community.norton.com/en/forums/pc-app-store-0
fwiw ~
I follow MalwareTips Forums.
I feel strongly that MalwareTips DIY Guide or MalwareTips one-on-one guided help would have sorted your machine.
I follow Malwarebytes Forums.
I feel strongly that Malwarebytes staff & experts would have sorted your machine.
Regards w Respect
Nov1723: Thanks for this SA. However I wanted to stay with trustworthy Norton processes. I finally was able to delete PCAppStore folder and the many sub-folders and files manually. How? Microsoft Support reset my laptop. Unfortunately this reset also removed many of my useful apps, including Norton. So I'm now reinstalling those useful apps. Norton was a disappointment. And my solution is very clumsy, but.
Jrogers:After many frustrating hours trying to get Norton to delete PCAppStore adware, turns out I need to buy some other service from Norton and then they'll uninstall. Very disappointing. I've used Norton for many years and always been looked after. This experience has shaken my faith in Norton. And I still have this adware on my laptop.
Mlawarebytes offers free second opinion on-demand scanner.
Malwarebytes Malware Removal Help offers free one-on-one help.
Malwarebytes staff & experts help all. Malwarebytes subscription is not needed.
- How to install and run a scan with Malwarebytes Free
https://malwaretips.com/blogs/run-a-scan-with-malwarebytes/
- Malwarebytes Malware Removal Help
https://forums.malwarebytes.com/forum/108-malware-removal-help/
Did you run the full system scan with Malwarebytes as suggested? No antiviral company can control where you surf nor what you download. Most times malware gets onto a computer via legit sites where, the site owners are not even aware of the redirects to download unwanted software. Browser settings and system permissions also play a role in what is allowed to download without prompt to the user. Free software, also comes packed with other installers that will download at a later time with the same permissions the original download was given. Just some examples of where and how things arrive on computers without us knowing beforehand.
SA
After many frustrating hours trying to get Norton to delete PCAppStore adware, turns out I need to buy some other service from Norton and then they'll uninstall. Very disappointing. I've used Norton for many years and always been looked after. This experience has shaken my faith in Norton. And I still have this adware on my laptop.
@Jrogers Download, install and run a FULL scan with Malwarebytes. It should quarantine what it finds and instruct you to reboot for removal. Please post your progress so we may follow-up.
For Windows: https://www.malwarebytes.com/
SA
Jrogers:The Company is: Fast Corporate LTD.
Jrogers:
PCAppStore folder, with files therein, has installed itself on my Acer laptop. [...]
Please review: PC App Store thread
https://community.norton.com/en/forums/pc-app-store-0
The Company is: Fast Corporate LTD.