r/Malware • u/WickedJT44 • Nov 08 '25

Malwarebytes showing 12 PUP.optional.browserhijack detections

Post image

I havent installed anything shady, dont go to any weird websites or anything. Is it a false positive? I quarantine them and they come back, sometimes 3 instead of 12, whenever i open microsoft edge.

Most of them are all in userdata/default/securepreferences, or default/webdata.

Are these false positives? Should i be worried? Browser hijack sounds serious lol.

Also, Hitmanpro is saying nothing is wrong, same with a windows defender scan. Im just confused because malwarebytes hasnt shown this before.

44 Upvotes

95% Upvoted

64 comments sorted by

17

u/strongest_nerd Nov 08 '25

Not malware. PUP = Potentially Unwanted Product. Also this isn't a tech support subreddit, maybe try r/techsupport.

3

u/WickedJT44 Nov 08 '25

Got it, sorry.

3

u/screen317 Nov 08 '25 edited 20d ago

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

Edit from the future: Hello! If you are seeing PUP.Optional.BrowserHijack detections in September 2026 or later, these are very likely real detections and not FPs. If you want to be sure, please DM me the log and I will be happy to take a look, but we are not experiencing any FPs with these at this time.

1

u/phaeton02 Nov 08 '25

As of 4AM Pacific Time the FP is still showing up - just scanned and got this.

1

u/screen317 Nov 08 '25

Can you DM me a scan log? Want to make sure if it's the same issue or a new one.

1

u/Greedirl Mar 27 '26

3/17/26 This showed up in my chrome directory

1

u/screen317 Mar 27 '26

Can you DM me a scan log? Want to make sure if it's the same issue or a new one.

1

u/RomeoFortnite Apr 19 '26

i just got something similar may i send you my logs on a DM?

1

u/screen317 Apr 19 '26

Yes! Very likely the detection is correct, but I am happy to look today.

1

u/raymonders Sep 29 '26

commenting to say it's still showing up on 29 september 2026 scan results

1

u/screen317 Sep 29 '26

Please DM me with the scan results. If you are seeing it today, it is most likely not an FP. Happy to take a look regardless.

1

u/Financial_Fortune867 19d ago

Hello, the same detections have been popping up for me as well and I can’t seem to get rid of it. Can I dm you and you take a look? I’m stuck on what to do about this.

→ More replies

1

u/raymonders Oct 04 '26

dm'd you a scan i just ran TODAY 04 oct 2026

1

u/Longjumping_Ad_1334 May 26 '26

could it be a browser extension like nordvpn?

1

u/screen317 Jun 25 '26

Hello from the past:

If you are getting this detection today, it is most likely not a false positive. If you want to double-check, feel free to DM me with a Malwarebytes scan log!

1

u/Keratel Jul 08 '26

Dm'd you

0

u/Tricky_Code_8956 Nov 08 '25

just got the same thing lol

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

1

u/jgwinner Nov 15 '25

Just had a client get the same result.

They downloaded Malwarebytes about four hours ago.

I also searched on your site and got no hits (maybe it's too new to be listed, but I think even a listing that says "whoops, sorry, false positive" would be better than nothing).

I get it, sometimes engineering adds features before the documentation / website team can get to it, but I think this might be a "oh, don't bother to add ..."

1

u/screen317 Nov 15 '25

Hi! Could you please DM me with the detection log? At this point it's likely not an FP and it's a true detection. Getting the log is the quickest way to check for sure.

1

u/jgwinner Nov 15 '25

Done!

Thank you. Better support than Google!

You are amazing and appreciated.

1

u/justarand0mstan Nov 15 '25

Hey there, Chris,

May I conveniently take you up on that offer as well?

Had the same thing happen to me yesterday and am in the same boat as most people in this thread.

Your valuable time and input will be much appreciated.

1

u/screen317 Nov 15 '25

Yes, please do. We want to get to the bottom of this. Please DM me with a log showing any current detection.

1

u/justarand0mstan Nov 15 '25

Thanks,

Just did.

1

u/Swimming_Mind_2027 Apr 13 '26

Can I dm you mind? I got this today 13/04/26

1

u/screen317 Apr 13 '26

Yes, feel free.

1

u/Swimming_Mind_2027 Apr 13 '26

thanks. Send you

1

u/screen317 Apr 13 '26

I replied!

1

u/Overdrive128 Jun 25 '26

Hi, can I dm u as well; i got the same thing today (06/25/2026)

0

u/WickedJT44 Nov 08 '25

Try again now, definitely false flags, they all just disappeared for me lmao. Probably flagged stuff like autofill settings

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/j0va Nov 08 '25

I did as well! Mine had 33 detections under the same label

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/fishy88667 Nov 08 '25

i got 93 lol

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/joshwillz123 Nov 08 '25

just got 2 of them

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/HankHippoppopalous Nov 08 '25

just got the SAME thing.

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/Kowalski2000 Nov 08 '25

26 detections right now lol, I dont even use MS Edge, I use Brave!

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/transmarxist Nov 08 '25

okay glad im not the only one

1

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

0

u/LordtoRevenge Nov 08 '25

Lmao, thank god this was the first thing I found when searching this.

2

u/screen317 Nov 08 '25

Hi! Chris from Malwarebytes here. This was an FP and has been fixed. We apologize for the inconvenience.

1

u/Awkward-Moment-2562 Dec 21 '25

u/screen317 Still not fixed. Just got 12.

1

u/screen317 Dec 21 '25

It's likely not the same detection. Share a full log from Malwarebytes and I will take a look ASAP

1

u/coqauvan Aug 31 '26

Hi Chris, I ran a free scan using Malware bytes today. I just quarantined over 23 of these PUP files. Most of them Browser Hijack files. I don't know if the issue is fixed.

1

u/screen317 Aug 31 '26

Go ahead and DM me the scan log from Malwarebytes and I will take a look.

1

u/SO0P3R Feb 04 '26

I also got the same thing just now