ctpopup.exe

[gdiloren]

I'm getting increasingly suspicious about CTPOPUP.EXE from HauteSecure, a new program I installed last week. I suspect it as being malicious. I can't do a quick scan on it as it gives me an access error and I suspect it to behave likewise with all other security softwares. Can you investigate this file? I can't attach it to this post nor compress it,  it is refused but I am an administrator so I don't understand...

[Lisandro]

Can't you submit (upload) it to the ftp server?

I can't attach it to this post nor compress it,  it is refused but I am an administrator so I don't understand...

exe files can't be attached to posts in forums.

[DavidR]

Here is your first port of call for your suspicions, http://www.google.co.uk/search?q=CTPOPUP.EXE.

http://www.prevx.com/filenames/X3218378697620016084-0/CTPOPUP.EXE.html

I would have though that hautsecure would also abve been an early port of call.
http://blog.hautesecure.com/forums/p/204/480.aspx.

[gdiloren]

Can't you submit (upload) it to the ftp server?

I can't attach it to this post nor compress it,  it is refused but I am an administrator so I don't understand...

exe files can't be attached to posts in forums.

I did a drag and drop of CTPOPUP.EXE in the ftp:/ftp.avast.com/incoming and it should have worked but I can't see it by myself. Can somebody check it?

[Lisandro]

But I can't see it by myself. Can somebody check it?

You won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded. Send an email to virus (at) avast (dot) com with the name of the uploaded file and a link to this thread

[misak]

we haven't any file with name "CTPOPUP.EXE" on our FTP so far. Better way is send it by email or upload it in password protected archive.

[gdiloren]

I tried again using IE but it's not working. I installed Filezilla and uploaded the file but access here again was refused. It's in my HauteSecure Folder, in the property, details, it has no name, it's 99-100 ko, it can't be compressed because of reader rigths and I tried to change the administrator rights but that too is refused. Looks like hard stuff here...! I downloaded HauteSecure googling it and FINJAN, SITEADISOR and WOT all were green OK. I guess you'll have to install it to get the file. Thanks.

[gdiloren]

Just connected to the internet on my old XPsp3 PC without trace of HauteSecure and BoClean updated normally to this afternoon def. On my Vista computer with virus (?) CTPOPUP.EXE there is no update installed since thursday. I download updates manually but the date stays July 10th!!! I can't open or access CTPOPUP.EXE so I can't email or upload you. But it is suspicious. Look at the screenshot of the properties:there is no vendor name, nothing. It takes control of the pc DEEP so called for security reason. Haven't tried to uninstall yet but I am suspicious it would fail.

[gdiloren]

In other words, is HauteSecure reliable and is ctpopup.exe "scannable" to common antimalwares since it can't be opened or accessed???

[gdiloren]

That's a file I can't upload to VirusTotal, for example (access denied)!!! No wonder nobody ever found it as being malware, it's not permitted to open it, access refused.

[gdiloren]

I uninstalled HauteSecure. It was interfering with both Adawre and Boclean at least. I had to go on SAFE MODE and use MalwareBytes file ASSASIN to delete CTPOPUP.EXE and the HauteSecure folder. Though I haven't been contacted in 24hrs by HauteSecure about this file and all over mentionned I can't make a clear opinion on this program and invite AILWIL to make sure it is not virus.