PUP.ProShopper

Posted: March 18, 2014

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	12,367
Threat Level:	2/10
Infected PCs:	6,319

First Seen:	March 18, 2014
Last Seen:	September 20, 2023
OS(es) Affected:	Windows

PUP.ProShopper, a program unrelated to the similar but separate Android application 'Pro Shopper,' is a Potentially Unwanted Program that's classified as adware. Without any features of any significance not associated with delivering advertisements to your browser, PUP.ProShopper is a minor security risk and usually should be uninstalled, despite its claims that PUP.ProShopper can provide quick access to new bargains. Throughout PUP.ProShopper's history, malware researchers also have seen most PC users suffer problems with removing PUP.ProShopper, which is why it's advised that you use appropriate anti-adware products.

PUP.ProShopper: The Professional Shopper You Probably Should Ditch

PUP.ProShopper is adware that disguises itself as a useful shopping assistant, although the benefits of its advertising discounts are extremely subjective. As adware, PUP.ProShopper displays its advertising recommendations automatically, and, like most such programs, will not let you disable this third party content easily. This simple, constant barrage of advertisements may expose you to potentially unsafe Web content, since PUP.ProShopper and other adware products scarcely are known for their strict security measures.

Although PUP.ProShopper will not attack your PC intentionally, PUP.ProShopper also may cause other problems that are the result of its inherent display of advertisements automatically. These may include modifying a Web page's content in ways that slow its loading times or streaming content, or preventing you from accessing all available content. PUP.ProShopper advertisements usually are formatted as injected links and thumbnails for products similar to those you already may be searching for online, but malware experts haven't seen any discernible, quantifiable discounts or other bargains from PUP.ProShopper that would be reliable enough to recommend using PUP.ProShopper, particularly considering its unnecessary drawbacks.

Online Shopping without the 'Pro' You Never Wanted

Although you always need to make your own choices about the value or lack thereof in Potentially Unwanted Programs like PUP.ProShopper, malware experts find that you have little to lose from removing PUP.ProShopper, and recommend doing so to keep your browser's content under your sovereign control. Deleting PUP.ProShopper with security tools experienced in removing adware also will help make sure that any browser changes initiated by PUP.ProShopper will be truly uninstalled, which isn't necessarily guaranteed for PC users who attempt more normal means of uninstalling PUP.ProShopper adware, such as via the Control Panel.

Because PUP.ProShopper doesn't use any normal modes of distribution or marketing, malware researchers expect to see PUP.ProShopper installers most frequently in free software bundles. These bundler utilities usually are found on sites already well-known for distributing adware, along with other download sources such as pirated software links. Safe browsing behavior coupled with strong Web-browsing security will give you the opportunity to repudiate many of these installation points, and, as a final safeguard, most anti-malware programs should be able to detect a PUP.ProShopper bundle before PUP.ProShopper ever gets a chance to load its advertisements.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%ALLUSERSPROFILE%\ProSHopeper\oyh.dll

File name: oyh.dll
Size: 426.49 KB (426496 bytes)
MD5: feb59074391179bef7d61dec51d3f823
Detection count: 272
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProSHopeper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\PRoShopper\8xixr_hfu.x64.dll

File name: 8xixr_hfu.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: 29dbf2cecd39c912733a1b19d08b96f4
Detection count: 164
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\PRoShopper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopppeuru\b9.x64.dll

File name: b9.x64.dll
Size: 473.6 KB (473600 bytes)
MD5: d42ef8a4ca1c777ca6df430dbe6a7b53
Detection count: 119
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopppeuru
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopper\3ADuya.dll

File name: 3ADuya.dll
Size: 426.49 KB (426496 bytes)
MD5: da9cc300c5c35176637b2a7ff0b6d38d
Detection count: 101
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopper\9TfueN.x64.dll

File name: 9TfueN.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: d48322eec55294b3092b919cf3b581a4
Detection count: 98
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopPEr\VC98U.dll

File name: VC98U.dll
Size: 425.47 KB (425472 bytes)
MD5: a3f261a8ea0ff3f1c1699af34f5fde29
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopPEr
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopapEr\3h3.x64.dll

File name: 3h3.x64.dll
Size: 472.57 KB (472576 bytes)
MD5: 32c3dc8b90c117d0765f693a2991f487
Detection count: 91
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopapEr
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopperr\Nc4YWa.x64.dll

File name: Nc4YWa.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 79c2dfd97a08720d6f88c6e34575907d
Detection count: 89
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopperr
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopper\sB1JUT1i.dll

File name: sB1JUT1i.dll
Size: 424.44 KB (424448 bytes)
MD5: 67bbfb3d096cb88faa5a8483d6d688dc
Detection count: 75
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopper\Eq.x64.dll

File name: Eq.x64.dll
Size: 513.53 KB (513536 bytes)
MD5: 3c24fbe14e86b9cd9237bb2f5b1e8577
Detection count: 52
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\PProShoppeR\tt3HH5Sup1.x64.dll

File name: tt3HH5Sup1.x64.dll
Size: 474.11 KB (474112 bytes)
MD5: f3d74c4fe17e5cd42550ffbea7ead40d
Detection count: 49
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\PProShoppeR
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopper\pqgtWJ.dll

File name: pqgtWJ.dll
Size: 424.96 KB (424960 bytes)
MD5: d46a07b29cf12294d8d366ca6414e3ba
Detection count: 37
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopper
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProShopPer\JsKix.x64.dll

File name: JsKix.x64.dll
Size: 471.04 KB (471040 bytes)
MD5: 27f0d35cff5793193fddd3edde522774
Detection count: 33
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProShopPer
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\PProShopperr\WiDZ.x64.dll

File name: WiDZ.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: 608d224bbf4ade695e520ec407b6da99
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\PProShopperr
Group: Malware file
Last Updated: September 22, 2014

%ALLUSERSPROFILE%\ProSHoppeer\zXzLtq.dll

File name: zXzLtq.dll
Size: 426.49 KB (426496 bytes)
MD5: 7d54a3c0e5a489267421ce4b124230d7
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\ProSHoppeer
Group: Malware file
Last Updated: September 22, 2014

Additional Information

The following directories were created:

%ALLUSERSPROFILE%\Application Data\ProShopper%ALLUSERSPROFILE%\ProShopper%PROGRAMFILES%\ProShopper%PROGRAMFILES(x86)%\ProShopper