Author Topic: win 32:PUP  (Read 15544 times)

0 Members and 1 Guest are viewing this topic.

oupulino

  • Guest
win 32:PUP
« on: April 03, 2012, 08:02:53 PM »
Hi guys can someone help me with this problem.I got this win 32:PUP and win 32: KillApp on my scans I have no idea how to fix.
The computers are too complicated for me and if GURU specialist is willing to connect with my PC  by remote assistance to fix the problem you are more than welcome

adotd

  • Guest
Re: win 32:PUP
« Reply #1 on: April 03, 2012, 08:05:34 PM »
Hi oupulino

Welcome to avast!WEBforum

can you visit the following webiste please and do as much as you can and post the logs

http://forum.avast.com/index.php?topic=53253.0

This helps out malware expert.

Regards

Anthony :)
« Last Edit: April 03, 2012, 08:07:25 PM by adotd »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: win 32:PUP
« Reply #2 on: April 03, 2012, 08:09:13 PM »
what is there to fix.....what is the problem with these detections ?

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: win 32:PUP
« Reply #3 on: April 03, 2012, 08:12:54 PM »
It looks like you have PUP enabled. PUP is a Potentially Unwanted Program that you may or may not want. Did you download the file yourself? If not, then another process could be using this PUP for malicious purposes. Are you able to take a screenshot of the viruses it finds?
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: win 32:PUP
« Reply #4 on: April 03, 2012, 08:19:01 PM »
Welcome to avast!WEBforum

can you visit the following webiste please and do as much as you can and post the logs
<snip>

Until we identify if there is a problem please don't send people to that topic as it is not yet established there is a malware problem and even then if it is one that will need specialist assistance.

The win32:KillApp [PUP] sounds like it is an HP process, so that is what we are trying to establish.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: win 32:PUP
« Reply #5 on: April 03, 2012, 08:21:47 PM »
Hi guys can someone help me with this problem.I got this win 32:PUP and win 32: KillApp on my scans I have no idea how to fix.
<snip>

What is the file name and location of the alert ?

What action did you take ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

oupulino

  • Guest
Re: win 32:PUP
« Reply #6 on: April 04, 2012, 12:30:46 AM »
 C:\WINDOWS\Temp\unp33555451.tmp
 C:\WINDOWS\Temp\unp1412841.tmp
 C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Sun\Java\Deployment\cache\6.0\13\5bd89d0d-35d4c681\smbkhrnvpetuqumq\jjvefskfgsqheydmybmfw.class
 C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP565\A0242038.exe
 C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP565\A0242037.exe

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: win 32:PUP
« Reply #7 on: April 04, 2012, 12:55:22 AM »
The win32:KillApp [PUP] detection you mentioned doesn't appear to be present in the list, whilst you don't give the malware names in the list, we are very familiar with the win32:KillApp [PUP] detections and the greatest majority they are on HP systems in the c:\HP\Bin\ folder.

Do you have an HP system ?

On the list of detections, what action did you take at the time of the detections ?

Re the first two detections, C:\WINDOWS\Temp\unp*.tmp:
I believe that should be in the C:\WINDOWS\Temp\_avast_ folder as the _avast_ fo;der is where avast sends/unpacks files that it is going to scan ?

The unp999999.tmp file format is what avast names its temporary files which it is about to scan in that location.

The last to detections in the C:\System Volume Information folder, I suspect may be related to the first two detections, if you deleted them then the system restore may have made copies (restore points) in the C:\System Volume Information folder.

All four of those can safely be deleted.

The third detection in your list, is in your JAVA cache and is generally an indication of a java exploit associated with an out of date JAVA version which is Vulnerable to attack. Your version 6.0.13 is way out of date and you need to update JAVA. That too is safe to delete.

- I would also suggest a visit to this site, which scans your system for out of date programs that have patches to close vulnerabilities, http://secunia.com/software_inspector/.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

oupulino

  • Guest
Re: win 32:PUP
« Reply #8 on: April 04, 2012, 01:14:07 AM »
They are in Virus chest at the moment.,so I just can deleted from Virus chest.
When I did boot time scan I set to deleted.
Maybe that why is not show win32:KillApp any more.
Yes I do have HP system about 6 years old.
Thank you for replay and good advice I will post the progress I start like this Avast product Norton Antivirus 2012 is going to the garbage

oupulino

  • Guest
Re: win 32:PUP
« Reply #9 on: April 04, 2012, 01:59:25 AM »
I visit this side  http://secunia.com/software_inspector/. but Microsoft warning is not recommended because is not compatible.What I should do ?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: win 32:PUP
« Reply #10 on: April 04, 2012, 02:28:46 AM »
Yes you can delete those from within the virus chest.

I don't know why Internet Explorer is mentioning compatibility, I haven't heard of this in the forums when we send people there. I have no problem if I visit with firefox.

I have just visited it using IE8 on my XP Pro system and I get the usual the website wants to use flash player (which I allow) and I get a pop-up reporting the JAVA digital signature for secunia has been verified (it uses a JAVA applet to do the check), see image, is that what you mean ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

oupulino

  • Guest
Re: win 32:PUP
« Reply #11 on: April 04, 2012, 03:39:50 AM »
Which Java I have to download ?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: win 32:PUP
« Reply #12 on: April 04, 2012, 01:54:01 PM »
The JRE (run time environment) version the latest I believe is 7 update 3.

This may save you a bit of hassle http://www.oracle.com/technetwork/java/javase/downloads/jre-7u3-download-1501631.html. So depending on what your Operating Systems is 32bit or 64bit (see image). You probably have windows XP (which is 32bit, with very rare exceptions), or possibly Vista; so it would be best to download the Windows x86 (32bit) Offline version. That allows you to download it and run it from your system rather that try to install it online.
« Last Edit: April 04, 2012, 01:56:12 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

oupulino

  • Guest
Re: win 32:PUP
« Reply #13 on: April 04, 2012, 05:35:27 PM »
Thank you for help it work .Now I like to instal this patches to close vulnerabilities, http://secunia.com/software_inspector/. but no luck it freezes up telling me that will uninstall previous version to do that asking to pres Next and nothing happen freeze up.
Is there any other software that will fix patches to close vulnerabilities ?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: win 32:PUP
« Reply #14 on: April 04, 2012, 05:39:50 PM »
What patch do you have problems with ?