Generic PUP.x

[lukehear]

Hi I am new to these forums can anyone tell me how to remove a Generic PUP.x from my PC, when McAfee scans it find this threat but when i try to remove it I get a message saying McAfee cannot completely remove this from your computer. every time McAfee scans it finds this Generic PUP.x what is it ? is it harmful and how do I get rid of it . :confused:

[secured2k]

The Generic PUP.x is not a virus but a PUP. PUPs are Potentially Unwanted Programs. This means it could be something you want and be legitimate but McAfee has found that sometimes it ends up on your computer without your knowledge or permission.

If you can post more information about the detection (File name and Path and program accessing the file), I might be able to tell you more information about what it is.

Otherwise, it is probably safe to remove or trust based on your PC experience. If you are getting popups or unwanted browser hijacks or toolbars, removing this PUP might fix your problem.

Note: I've found that some ISP's and computer manufacturers will install some software considered PUPs.

[lukehear]

Thank you for the reply I am quite new to computer's so do not have allot of knowledge on this subject.

this is what I am seeing the scan is finished....

"We finished a scheduled scan of your computer and 1 item requires your attention. Start fixing it now by viewing the scan details."

Results
Items Scanned: 222144
Items Detected: 1
Items Fixed: 0
Items Quarantined: 0
Items Remaining: 1

the details shown are

Detection Type:potentially Unwanted Programme
Detection Name: Generic PUP.x
Status Detected

Items.
file Name:C:\MyBackup-07-11-28
115 1AM\Documents and Settings\Sharmayne\Local Settings\Temp\pkg-152bb430\Freeze-SmartShopper_Installer.exe


When I try to remove it I get a message saying cannot be completely removed everytime McAfee Scans it finds this pup but no other problems.

and yes I am having some problems with pops up saying Sharmayne is on-line from my grandaughters msn when she is def not on-line also i see a tool bar called ALOT I cant remember installing.

[secured2k]

McAfee might not be able to remove the PUP since it might be contained within an Archive (a package of a group of files) OR the file is locked by backup software (since I see the folder detection starts with "C:\MyBackup...")

Simply locate the file in "My Computer" and delete it.

[secured2k]

I looked up a copy of an adware infection library and found an example of your detection.

AdWare.Win32.Shopper.l (adware)

* \\??\\Downloads\myspacegraphicsfree(2).exe\resource.0000.pkg\Freeze-SmartShopper_Installer.exe


If your computer has run some unknown code claiming to be some picture or video, you might have another trojan downloader.

You can check your computer with another Antivirus (in case McAfee missed something) and MalwareBytes for AntiSpyware.

ESET Online Scanner - Scans and Cleans detected threats
MalwareBytes - Specialized AntiSpyware scanner

Finally, if you see someone signing on and you know for sure they are not signing on (be careful that you can truly verify this) then the account might be compromised. The password should be changed from a CLEAN computer only.

[lukehear]

Thanks for that information I did a search for Freeze-SmartShopper_Installer.exe and found the file and deleted it then i did another full scan to which my security found C\program Files\Shopping Report\uninst.exe, then was asked what did I want to do so I tried to remove it and it worked. I wanted to know now if I am OK or should I try another aniti virus as you suggested?

as I know very little about security and need to understand more I cant ask people and find out things because I am deaf its much easier to read and learn I wondered if there were any sites that could help me understand names terms and so on,

thanks for your help

[secured2k]

Even if McAfee detected a PUP, your system should be safe. The main problem of PUPs is that they could be annoying software with completely legitimate license information, installers, and uninstallers. Ideally, you would just remove the bad PUP from Add/Remove Programs. However, since some PUPs come with other software (usually "free" software), you can't remove them without breaking a license agreement or removing the parent program.

If your system seems to be running OK, then chances are you are fine and don't have to do more scans. Some people want the feeling of added security and assurance their system is indeed clean. This is why I provide a link to a good spyware/behavior scanner (malwarebytes) and an AntiVirus that is good at detecting new and unknown viruses without a lot of false positives (ESET Online Scanner).

[lukehear]

Hi.
could you give me some advice... tonight I had a tab message fro McAfee saying

McAfee has blocked a potentially unwanted program (PUP) on your computer. If you do not recognize it, we recommend that you remove the program.

About this Potentially Unwanted Program
Name: Generic PUP.x
Location: C:\System Volume Information\_restore{EBE7F5B4-9626-4FB0-8C04-62912E099CB4}\RP546\A0089312.exe

Spyware, adware, and other potentially unwanted programs can harm your computer, compromise its security, and damage valuable files.



OK sorry but when I get stuff like this i panic, can you tell me if its normal to get these type of message .

[secured2k]

It is normal to get an alert if McAfee detects something. In this case, mcAfee detected the PUP in System Restore (Restore point #546). This is either an older restore point that contains a backup of your system from an ealier point when the PUP was installed OR a freshly created Restore point created automatically by Windows during a system change or software install.

VirusScan will detect and clean items in System Restore. In some cases, the scan engine *might* not be able to clean files in System Restore in which case the recommended instruction is to disable and re-enable System Restore to clear all the contents of the past restore points.

[lukehear]

thank for your advice.... would you say in most cased its best just to close the alert or remove the programme? at first I wasn't sure what it was .