Author Topic: Scan PUP????????????  (Read 20494 times)

Offline blowtorch73

  • Full Member
  • ***
  • Posts: 172
  • Gender: Male
    • Personal Message (Offline)
Scan PUP????????????
« on: February 04, 2012, 09:16:00 AM »
Just about to run a scan when I noticed for the very first time, 'Scan PUP'. What is it and should I turn it on?
Vista Home Premium:64bit:4.00GB:SASPro:Avast Internet Sec:MBAM(PRO)

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21799
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #1 on: February 04, 2012, 09:21:07 AM »
You turn it on if You want PUP to be detected.      http://searchsecurity.techtarget.com/definition/PUP

Since it is not virus, it is off by default

The forum is full of cases.... If You search for PUP


See igors reply here
http://forum.avast.com/index.php?topic=54216.msg554460#msg554460
« Last Edit: February 04, 2012, 09:27:35 AM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline naren17

  • Sr. Member
  • ****
  • Posts: 263
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #2 on: February 04, 2012, 12:22:24 PM »
I think PUP should be enabled by default. It would be good for majority of users i.e average users.

Some PUP are very difficult to remove/uninstall & create probs for average users.

But users differ in their opinion about PUP.

I think in Avast PUP should be enabled by default for average users sake.

For advanced users sake Avast can set the PUP settings in RealTime as ask & OnDemand as select/choose in result window. Good for both average & advanced users, wot say?
« Last Edit: February 04, 2012, 12:27:30 PM by naren17 »

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69240
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #3 on: February 04, 2012, 12:32:06 PM »
Sorry I couldn't disagree more, most people haven't a clue what a PUP is much less what is actually installed on their systems.

For the very reason you mention, users differ in their opinion about PUP, to have an opinion the user has to understand what a PUP is and most haven't got a clue.

Those who do understand what a PUP is can obviously make an informed decision on A) if they enable scanning for it and B) what action to take when one is found. Without that informed decision users are more likely to make the wrong decision.

Not included in most definitions of PUPs are tools which can be used for good or evil, some have been legitimately installed for a specifically good purpose, but could have been unknowing installed for a malicious purpose.

Not all antivirus programs scan for PUPs and avast has it turned of by default (an exception being the boot-time scan). So if you get this you have been tweaking the avast settings without knowing what the impact might be.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Offline blowtorch73

  • Full Member
  • ***
  • Posts: 172
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #4 on: February 04, 2012, 03:25:29 PM »
most people haven't a clue what a PUP is much less what is actually installed on their systems.
For the very reason you mention, users differ in their opinion about PUP, to have an opinion the user has to understand what a PUP is and most haven't got a clue.

As one of the 'most people' ie the majority, I can only agree with you.  And that being so, the PUP scan will remain as it has been since I purchased this computer more than 2 years ago, switched off. That said, I am very grateful for the replies and the links and will now re-visit both in an attempt to get at least a basic understanding of the PUP.
Vista Home Premium:64bit:4.00GB:SASPro:Avast Internet Sec:MBAM(PRO)

Offline blowtorch73

  • Full Member
  • ***
  • Posts: 172
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #5 on: February 04, 2012, 03:45:25 PM »
My daughter tells me that sometimes when she is downloading something from iTunes, she fails to spot a box that requires a tick to be removed if she doesn't also want to  download 'Safari' or something similar. Fire all the bullets you want, but in the very simplest of examples would the failure to spot the option and the subsequent downloading of Safari be an example of PUP. If not, could someone quote me an equally simple example of what is PUP?
Vista Home Premium:64bit:4.00GB:SASPro:Avast Internet Sec:MBAM(PRO)

Offline Gargamel360

  • avast! Evangelist
  • Super Poster
  • ***
  • Posts: 2358
  • Gender: Male
  • Memento Mori
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #6 on: February 04, 2012, 03:54:48 PM »
No, Safari would not be a PUP.  Thats just called an "opt-out" method of bundling things with installers. 

PUPs are programs that can be used be someone for good purposes on their own PC, but could also be used by someone in conjunction with a malware infection to harm you.

For examples, Nirsoft makes free utility programs that often get flagged as PUP.  One is a password recovery tool....great if you actually lost your password, but installed along with malware that can send out info from your PC, it could also steal your passwords maliciously.
Signature?  But I gots no pen....

Offline ady4um

  • Massive Poster
  • ****
  • Posts: 2676
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #7 on: February 04, 2012, 03:57:46 PM »
Safari is NOT PUP. The method used by that program to "bundle" the potential installation of some other "software" (in this case, Safari) is also NOT PUP.

Simple example of Potential Unwanted Program: keyloggers. If you have a program that records which keys are pressed, you can use it for your own security, or also to know what the kids are doing ("positive" use in your eyes). But if someone else is using a keylogger to spy on you (meaning, you don't have a clue it is recording you, and you don't know it was installed in your system), the that is a "negative" use of the same program (in your eyes). Hence, the same program can be used for positive goals, or negative ones. Hence, Potential Unwanted  Program, PUP.
ADD/REMOVE PROGS -> avast -> CHANGE/REMOVE -> REPAIR & REBOOT
Avast! 7 FAQ | FAQ & KB | Docs | Removal Utils | Configure Mail Shield | report FP | License Registration | UNSECURED?

Offline lloydc

  • Jr. Member
  • **
  • Posts: 51
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #8 on: February 04, 2012, 05:09:20 PM »
My approach here was to do a full scan with PUP off and then repeat it with PUP on...Nothing showed up in either scan so I now I believe if a pup is found it has a high probability of being unwanted (but will be cautious about deleting it)...Hope that logic is correct...
Win7 64 bit, 6gig RAM, Avast 6.0 free, MBAM free, Spyware Blaster Free

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21799
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #9 on: February 04, 2012, 05:29:45 PM »
@blowtorch73 this should be detected as PUP


http://www.technicalinfo.net/blog/security/20071230_CommercialKeylogger.html



And someone with a PUP detection yesterday

http://forum.avast.com/index.php?topic=92541.0

« Last Edit: February 04, 2012, 05:34:23 PM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline blowtorch73

  • Full Member
  • ***
  • Posts: 172
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #10 on: February 04, 2012, 05:35:26 PM »
Thanks guys. I now know that I knew less than I thought I knew about PUPS when I posted my last reply. However, having read the replies to that post, I now also know that I now know more than I knew then thanks to you guys who, knowing more than I will ever know about computers were willing to pass on a little of that knowledge to me.  Thank you.
Vista Home Premium:64bit:4.00GB:SASPro:Avast Internet Sec:MBAM(PRO)

Offline blowtorch73

  • Full Member
  • ***
  • Posts: 172
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #11 on: February 04, 2012, 05:40:13 PM »
@blowtorch73 this should be detected as PUP


http://www.technicalinfo.net/blog/security/20071230_CommercialKeylogger.html



And someone with a PUP detection yesterday

http://forum.avast.com/index.php?topic=92541.0


Thanks for that Pondus, I now have a much clearer picture of the PUP thanks to those two links. ;)
Vista Home Premium:64bit:4.00GB:SASPro:Avast Internet Sec:MBAM(PRO)

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21799
  • Gender: Male
    • Personal Message (Offline)
Re: Scan PUP????????????
« Reply #12 on: February 04, 2012, 05:42:38 PM »
Some AV vendors call PUP for PUA. (possible unwanted application)


Malwarebytes also have PUM  (possible unwanted modification) detection for settings tatt may have been done by malware, like turning off windows update / firewall / security senter warnings etc.......
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now