Potentially Unwanted Programs (PUPs)

How to Detect and Remove PUPs from Systems

 


VirusScan Enterprise 7.x Instructions

[Enabling Potentially Unwanted Program detection through On-Access Scan]

  1. Click on the Start button in the taskbar
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the On-Access Scan icon

  5. Click on the All Processes icon on the left
  6. Click on the Advanced tab
  7. Under the Non-viruses section
    • Check the box for Find potentially unwanted programs
    • Check the box for Find joke programs

  8. Click OK

[Enabling Potentially Unwanted Program detection for On-Demand Scanning]

  1. Click on the Start button in the task-bar
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the On-Demand Scan icon

  5. Click on the Advanced tab
  6. Under the Non-viruses section
    • Check the box for Find potentially unwanted programs
    • Check the box for Find joke programs

  7. Click Save as Default... to make these settings permanent for all future On-Demand scans

[Enabling E-Mail detection for Potentially Unwanted Programs]

  1. Click on the Start button
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the Virus Scan Console icon

  5. Right Click on E-mail Scan and select Properties
  6. Click on the Advanced tab

  7. Under the Non-viruses section
    • Check the box for Find potentially unwanted programs
    • Check the box for Find joke programs

  8. Click OK
Back to Top

VirusScan Enterprise 8.x Instructions

[Enabling Potentially Unwanted Program detection through On-Access Scan]

  1. Click on the Start button in the taskbar
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the VirusScan On-Access Scan icon

  5. Click on the All Processes icon on the left
  6. Click on the Unwanted Programs tab
  7. Under the Detection section
    • Check the box for Detect unwanted programs
  8. Click OK

[Enabling Potentially Unwanted Program detection for On-Demand Scanning]

  1. Click on the Start button in the taskbar
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the On-Demand Scan icon

  5. Click on the Unwanted Programs tab
  6. Under the Detection section
    • Check the box for Detect unwanted programs
  7. Click Save as Default to make these settings permanent for all future On-Demand scans

[Enabling E-mail detection for Potentially Unwanted Programs]

  1. Click on the Start button
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the VirusScan Console icon

  5. Right-click on E-mail Scan and select Properties

  6. Click on the Unwanted Programs tab
  7. Under the Detection section
    • Check the box for Detect unwanted programs
  8. Click OK

[Setting Exclusion and Removal options for Potentially Unwanted Programs]


Excluding certain Potentially Unwanted Programs by category

  1. Click on the Start button
  2. Go to Programs
  3. Go to the Network Associates folder
  4. Click on the VirusScan Console icon

  5. Double click on Unwanted Program Policy
  6. Select the Detection tab
  7. Clear the checkboxes for any categories of programs that you would like to exlcude from detection

  8. Press Apply

[To exclude specific detections in the DATs click on the Exclusions...]

 
  1. To add a new custom exclusion click the Add... button

  2. Either:
    • Type in the name of a specific detection name to exclude and press OK
    • OR Press the Browse... button to bring up the following dialog:

      Use this dialog to locate the specific detection name you wish to exclude,
      highlight it in the list, and press OK

[Adding custom detection for programs not included in the DATs]

  1. In the Unwanted Programs Policy dialog select the User-Defined Detection tab

  2. Click the Add... button

  3. Enter the filename and a description for the custom detection
  4. Press OK
Back to Top

VirusScan Online 9 Instructions

[Potentially Unwanted Program detection]

  1. Click the Start button from the toolbar
  2. Go to Programs
  3. Go to the McAfee folder
  4. Click on McAfee SecurityCenter

    Notice the link for "potentially unwanted programs" under the Scan My Computer for Viruses option. Clicking on this link will further inform you about Potentially Unwanted Programs.

  1. Click on Scan My Computer for Viruses (this will launch McAfee VirusScan)
  2. Ensure that the checkbox for Scan for potentially unwanted programs is checked:


    If you wish to disable scanning for potentially unwanted programs make sure the check box is unchecked before beginning the scan

Back to Top

VirusScan Online 10 Instructions

[Potentially Unwanted Program detection]

  1. Click the Start button from the toolbar
  2. Go to Programs
  3. Go to the McAfee folder
  4. Click on McAfee SecurityCenter

    Notice the link for "potentially unwanted programs" under the Scan My Computer for Viruses option. Clicking on this link will further inform you about Potentially Unwanted Programs.

  1. Click on Scan My Computer for Viruses (this will launch McAfee VirusScan)
  2. Ensure that the checkbox for Scan for potentially unwanted programs is checked:

    If you wish to disable scanning for potentially unwanted programs make sure the check box is unchecked before beginning the scan


[Trusting a Potentially Unwanted Program]

Upon detection a Potentially Unwanted Program, users may choose to trust wanted programs.

  1. This is done by clicking the Trust this PUP link

The Trusted PUPs List may be managed via the Advanced PUPs tab.

  1. Click the Start button from the toolbar
  2. Go to Programs
  3. Go to the McAfee folder
  4. Click on McAfee SecurityCenter
  5. Click Configure VirusScan Options
  6. Click Advanced
  7. Click PUPs
  8. Click Edit Trusted PUPs List
  9. Place a check next to the PUP that you wish to remove from the list and click Remove
Back to Top

Managed VirusScan 3.0 Instructions

[Potentially Unwanted Program detection]

  1. Log In to the online Managed VirusScan account (e.g. http://www.mcafeeasap.com)
  2. Click on the 'View' link for the 'Managed VirusScan' service.

  3. Select 'Configure' from the menu and click on 'Manage Your Policies'.

  4. Click on the 'Add New' button to create a new policy. If you already have an existing policy defined, click on the policy name and skip to step 6.

  5. Enter a name for the new policy and select all the groups to which this new policy would apply.

  6. Click on the Advanced Settings tab.

    Under the section 'Enable optional additional scans', check the option for 'Scan for Potentially Unwanted Programs (adware & spyware)' to enable detection of Potentially Unwanted Programs. Uncheck this check box to disable protection against Potentially Unwanted Programs. Click on 'Show Advanced Selection' to display additional options that allow you to specify application(s) that should be included when scanning with Potentially Unwanted Programs protection On. Uncheck the check box for applications you would like to exclude from detection when scanning for Potentially Unwanted Programs.

  7. Click on the 'Submit' button to save the settings

[Excluding files from being scanned]

  1. Click on the 'Specify Exclusions' tab to create an exclusion for a particular file.
    Enter the complete path including the name of the file that is being excluded from being scanned.
    Click on the 'Add' button. When prompted if the path is a folder or a file, click on the 'No' button.

  2. Click on the Submit button to save the settings

All the settings are applied to the Managed VirusScan client agent the next time an update occurs that downloads an updated product file (e.g. when a new virus definition file is downloaded and installed).

Back to Top

McAfee AntiSpyware 2.0 Instructions

[To exclude an application from detection]

Method 1 - in response to an AutoProtect alert

  1. While AutoProtect is enabled, launch the program you wish to exclude from detection
  2. When the warning dialog appears, click Trust this program

    The program will no longer be detected

Method 2 - following a manual system scan

  1. Click on the Start button in the taskbar
  2. Go to Programs
  3. Go to the McAfee folder
  4. Click on McAfee AntiSpyware
  5. When the main McAfee AntiSpyware dialog appears, click the Scan section tab

  6. Select Thorough Scan
  7. Click the Scan Now button
  8. When the scan is finished, highlight the program you wish to remove from detection and click the Trust button

  9. When the confirmation dialog appears, click Yes

    The program will no longer be detected


[To resume detection for an application previously excluded]

  1. Click on the Start button in the taskbar
  2. Go to Programs
  3. Go to the McAfee folder
  4. Click on McAfee AntiSpyware
  5. When the main McAfee AntiSpyware dialog appears, click the Options section tab

  6. Under the Settings section, click Trusted Programs

  7. Highlight the program in the list for which you wish to resume detection
  8. Click the Untrust button
  9. When the confirmation dialog appears, click Yes

    The program will be detected again by AutoProtect and in future scans

Back to Top

ePO 4.0 Specific Instructions

[Adding PUP exclusions via ePO 4.0]

  1. Determine the name of the PUP you wish to exclude (this can not be done in ePO).Use a local VSE console to locate the name.You can also refer to detection logs, the McAfee VIL, or other resources.
  2. Click the Systems button/widget in the top navigation bar.
  3. Click the Policies tab.
  4. Choose the product you wish to configure via the Product pop-up menu.
  5. Click the Policy Name for the Unwanted Programs policy.
  6. Specify the detection names to exclude.You can click the Plus button to add more than 1.
  7. Save via the Save button.
Back to Top

McAfee Total Protection Instructions

[To exclude an application from detection]

Method 1 – In response to an AutoProtect alert
  1. When the warning dialog appears, select the Allow button:

    The program will no longer be detected unless you remove it from the Trusted Items list.

     


Method 2 – Following a manual system scan

  1. When the scan is complete, select the Trust button next to the detection you wish to trust:

    The program will no longer be detected unless you remove it from the Trusted Items list.

     


[To resume detection for an application previously excluded]

  1. Open McAfee Total Protection
  2. Select the Navigation option in the upper right corner
  3. Select the Quarantined and Trusted Items option in the Navigation Center:
  4. Highlight the exclusion you wish to remove and select the Remove From Trusted List button:


  5. The detection will no longer be excluded.

Back to Top