PUP Poll

[Para-Noid]

IMO it would have been better to ask, "which is better PUP's enabled or disabled?" And not even bother with a poll. And you would have accomplished the same thing.

[Dch48]

I voted for it to be disabled by default. I have had a few things detected as PUPs and every one was a safe file. Even if some other vendors detect it on VirusTotal (even as a "trojan"), that doesn't necessarily mean it's bad. Read the user votes and you will usually see that the file is actually not malicious. If PUP detection is enabled by default, it could cause useless problems and anxieties for novice users.

[Dch48]

Found 1 link today. Check out, only Avast detected as PUP, many other as Trojan. And it seems Trojan not PUP.

http://www.virustotal.com/file-scan/report.html?id=908d7bac6559fcf734203e353c6ab76a7b885ab4243da62f79fbb6d588687e8c-1314389406

Thanxx
Naren

The main reason that particular file is flagged is that it has a double extension. Many antimalware apps flag such things as a matter of course and they may or may not be malicious.

[sooners2win]

I did few tests & have observed that enabling PUP sometimes detects 1-2-3 more malware, & I checked the malware with VirusTotal & sometimes the malware detected as PUP by Avast were detected by many in VirusTotal as Trojan & other names.

I dont know whats the PUP criteria for each Vendors. I have seen quite a few detection where malware were detected as Trojan, PUP & other name. Some Vendor detected the malware as PUP while the other detected it as Trojan & the other detected with another name. I dont know whats the criteria of PUP for Avast but I find sometimes when Avast detects a malware as PUP, the same is detected by many in VirusTotal as Trojan & Avast is the only with PUP detection.

I think PUP should be enabled by default in Avast.


Thanxx
Naren

Avast is not the only program with PUP protection..... 

[BanziBaby]

I voted disabled.

I have a drive with Win7 on it & Avast Free, Avast flags mpc-hc.exe (media player classic - home cinema) & dbpoweramp music converter as PUP's when the apps are more than trustworthy.

Having it enabled will just increase the FP rate.

BaNzI

[Para-Noid]

Having it enabled will just increase the FP rate.

BaNzI

I would rather get a FP than let something through.
Once the nasty is in the chest I can always re-scan at a later date. Then restore if I decide too. 

[naren17]

I voted disabled.

I have a drive with Win7 on it & Avast Free, Avast flags mpc-hc.exe (media player classic - home cinema) & dbpoweramp music converter as PUP's when the apps are more than trustworthy.

Having it enabled will just increase the FP rate.

BaNzI

So why Avast's PUP detection gives many FP's? Majority of security products now enable the PUP in default settings coz its the setting used by majority of users & safe for them. Avast shouldn't increase the FP's with PUP enabled. Avast should improve their PUP detection then if it gives FP's on programs which are not PUP.

Thanxx
Naren

[naren17]

http://www.virustotal.com/file-scan/report.html?id=0f2573e022d9058370cb56386f16f4dd6523634e7b98ab8c49403ebf4337dd66-1314963732

Different detection by Avast versions, why?

Thanxx
Naren

[Asyn]

Different detection by Avast versions, why?

Different engines, different databases.

[jacal]

Disabled.

http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/