Author Topic: WIN 32: PUP-gen [PUP] infection  (Read 6112 times)

0 Members and 1 Guest are viewing this topic.

Hermie

  • Guest
WIN 32: PUP-gen [PUP] infection
« on: June 12, 2012, 02:17:51 PM »
This morning (June 12, 2012) I installed Avast Free edition on a Toshiba laptop which runs Windows XP.
I updated both program and virus definition.
Then I started a start up scan. Avast Free warns that at C:\Program Files\Toshiba\ConfigFree\NDSTray.exe is infected by
win32:PUP-gen [PUP]
Please advice what to do.
Thanks in advance for your help which highly appreciated!

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: WIN 32: PUP-gen [PUP] infection
« Reply #1 on: June 12, 2012, 02:32:49 PM »
Hi Hermie,

You could scan NDSTray.exe at VirusTotal and give the results back to us. The avast PUP detection is because NDSTray.exe could also be an unwanted file masquerading as the legit one.
The only legit program going by the name of NDSTray.exe runs exclusively on some Toshiba computers that have more than one network connected  to be able to switch easily between these network devices. As you mention you are actually on a Toshiba it is more than likely you have the legit file and this PUP flag is not appropriate in your case.

polonus
« Last Edit: June 12, 2012, 02:59:44 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: WIN 32: PUP-gen [PUP] infection
« Reply #2 on: June 12, 2012, 02:51:00 PM »
PUP is not a infection.....that is why pup scan is default off in quick/full scan
It is default on in bootscan.....wich is a scan option made to be used when something is wrong on your system

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Re: WIN 32: PUP-gen [PUP] infection
« Reply #3 on: June 12, 2012, 03:04:44 PM »
Hi Pondus,

Adopted the txt accordingly, PUP means possibly unwanted program. An additional VT scan could be handy. A scan with File Threat Check could also be appropriate: free version download from: http://www.computer-support.nl/Applications/FTRCheck_Setup.exe 

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Hermie

  • Guest
Re: WIN 32: PUP-gen [PUP] infection
« Reply #4 on: June 13, 2012, 10:29:59 AM »
Thanks guys, I will check with Virus Total and FTR Check. Will report later.

Hermie

  • Guest
Re: WIN 32: PUP-gen [PUP] infection
« Reply #5 on: June 13, 2012, 11:52:47 AM »
Done.

First the file was analyzed by Virus Total, detection ratio: 0/44. (note: file was already checked on Sep 25, 2011)
FTC check: safe.

Which option (1.2,3,4,5,6,7,8) I got to choose running a start-up scan again.
Choosing ESC stops the freeware scanner.

Thanks, I shall be looking forward hearing from you again.

Hermie

  • Guest
New Start Up Scan - what to do?
« Reply #6 on: June 14, 2012, 09:14:12 AM »
Morning everyone.

What to do to avoid Avast Free stays warning again for PUP during start up scan?

Any ideas?

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: New Start Up Scan - what to do?
« Reply #7 on: June 14, 2012, 09:42:15 AM »
Morning everyone.

What to do to avoid Avast Free stays warning again for PUP during start up scan?

Any ideas?
Either turn off PUP's ( default setting ) or exclude the exe file in file shield exclusions if you feel it is safe.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: WIN 32: PUP-gen [PUP] infection
« Reply #8 on: June 14, 2012, 11:22:29 AM »
i dont see the problem, when you know what PUP is....and stop using boot scan as your regular scan
use the default quick/full scan with default settings for your weekly/monthly scan

Hermie

  • Guest
Re: WIN 32: PUP-gen [PUP] infection
« Reply #9 on: June 14, 2012, 12:34:20 PM »
Thanks guys for your replies. Quick/full scan will be used.