3 replies to this topic

[Clark2011]

Hello,

I'm running Windows XP. I have scanned three times using SAS and I keep getting the same four entries:

PUP.CNETInstaller

PUP.SoftonicDownloader

Heur.Agent/Gen-WhiteBox

PUP.Adinstaller

Are they viruses or any harmful software? They seem to be deleted but they reappear every time I reboot and scan my machine.

I would really appreciate if you could help me out.

Thanks.

[SASJoe]

Hi Clark,

These detection rules are all what we call 'notify' rules. If a file gets detected by one of these rules then we notify the user by showing the result in the usual 'items found' window, HOWEVER, in order to actually delete these items you need to click the checkbox next to each of these items in the window. If you do not check these, then they are not removed. This is probably what you are experiencing.

The reason we have 'notify' rules is because some of our rules are more heurisitics based so we like to err on the side of caution, and also because some programs are not really 'malicious' per se but may be unwanted (hence the PUP prefix to the detection rules, it means Potentially Unwanted Program) so we don't want to remove the item automatically, we notify the user and leave that choice up to the user since their PC is not in iminent danger from PUP items.

Next time you run a scan and these items come up, make sure to check the checkboxes next to each of these that you wish to be deleted.

Have a good day!

[Clark2011]

Hello,

Thanks for your help. I'm sure I checked the textboxes but, for some reason, I was able to delete them in the fourth scan!

Anyway, I really appreciate the explanation, a great help.

Thanks a lot!

[Bunty]

Hi,

I had PUP.iBrite, please can you tell me the type of program? Many thanks! B