PUP.Software Version Updater

Posted: May 16, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	5,398
Threat Level:	1/10
Infected PCs:	88,637

First Seen:	May 16, 2013
Last Seen:	March 10, 2025
OS(es) Affected:	Windows

PUP.Software Version Updater is adware that gives PC users the 'opportunity' to install additional unwanted software along with their intended installations. PUP.Software Version Updater's installed programs consist of Potentially Unwanted Programs which, like itself, may use some negative features that are marketed as beneficial for your PC, such as adware pop-ups or a browser hijacker's search redirects. Currently, malware researchers don't classify PUP.Software Version Updater as very risky to your PC, but still suggest deleting PUP.Software Version Updater and any software installed by PUP.Software Version Updater. If necessary, you can use anti-malware tools to be certain that all components of PUP.Software Version Updater's installations truly are removed from your PC.

Knowing When to Turn Down an 'Update' Download

PUP.Software Version Updater offers a range of different third party applications from their 'partners.' PUP.Software Version Updater and its fellow installers are packaged together with unrelated software, themselves, making it simple to install PUP.Software Version Updater by accident, which will then encourage you to install further software of questionable value. Malware researchers previously have seen browser hijackers, adware, and Potentially Unwanted Programs being distributed through PUP.Software Version Updater, and generally recommend avoiding PUP.Software Version Updater along with any software associated with PUP.Software Version Updater.

One particular risk often associated with PUP.Software Version Updater is the danger of the installation process proceeding, even when you've declined. While this could be passed off as a simple coding mishap, its persistence and poor quality control with regards to their partners leads malware researchers to suspect that this 'mistake' may be an intentional attempt to use PUP.Software Version Updater and other PUPs to install unwanted software against your will.

A Version of Your PC that's not Loaded Down with PUPs

Web surfers who don't frequent unsafe download locations and use suitable security software to scan any potential file bundles before opening them will be in minimal danger from PUP.Software Version Updater, which should be detectable by most anti-malware products. However, deleting PUP.Software Version Updater or software installed by PUP.Software Version Updater may require resorting to dedicated anti-malware products.

Symptoms of any PUP.Software Version Updater's installations may be expected to vary. However, some symptoms are more likely than others, and malware researchers would recommend keeping a sharp eye out for browser-injected advertisements, search enengine redirects, homepage hijacks or other common methods of monetizing your PC as cheaply as possible.

Aliases

Adware.Downware.1528 [DrWeb]Artemis!4309397D01A2 [McAfee]PUP/Win32.Amonetiz [AhnLab-V3]Win32:Amonetize-D [PUP] [Avast]Artemis!AFCC7C93E2E0 [McAfee]Amonetize [Sophos]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%PROGRAMFILES%\BitTorrent\BitTorrent.exe

File name: BitTorrent.exe
Size: 383.48 KB (383488 bytes)
MD5: 49779b2ee7a76b73211fff6603c3637b
Detection count: 281
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\BitTorrent
Group: Malware file
Last Updated: August 11, 2016

%TEMP%\LC7O4PMST\Bundle_NationZoom.exe

File name: Bundle_NationZoom.exe
Size: 187.31 KB (187313 bytes)
MD5: db9d491c24dd78edaaca05634fcb35fd
Detection count: 274
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\LC7O4PMST
Group: Malware file
Last Updated: July 20, 2016

%PROGRAMFILES(x86)%\Manager\Manager.exe

File name: Manager.exe
Size: 169.19 KB (169192 bytes)
MD5: e224dbf05d1d92a13e15991746c53d6b
Detection count: 272
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Manager
Group: Malware file
Last Updated: April 27, 2020

%PROGRAMFILES%\nplus\nplus.exe

File name: nplus.exe
Size: 383.48 KB (383488 bytes)
MD5: 20b23d50a4a4fdc2797b047ca1301ef9
Detection count: 237
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\nplus
Group: Malware file
Last Updated: August 11, 2016

%TEMP%\WindowsUpdateKB12695__7428_il50685.exe

File name: WindowsUpdateKB12695__7428_il50685.exe
Size: 1.13 MB (1139984 bytes)
MD5: 416fe2c2154bb011def24ef189fe3e87
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

%WINDIR%\chromebrowser.exe

File name: chromebrowser.exe
Size: 2.67 MB (2678577 bytes)
MD5: 7154db3b323e85e8464d19cfa93a5fe0
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: April 30, 2016

%PROGRAMFILES%\igfx32\igfx32.exe

File name: igfx32.exe
Size: 379.39 KB (379392 bytes)
MD5: bd97b699e97a1f81ec02005085ad975e
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\igfx32
Group: Malware file
Last Updated: November 24, 2016

%TEMP%\windowsupdatekb12695__7428_il410878.exe

File name: windowsupdatekb12695__7428_il410878.exe
Size: 722.85 KB (722856 bytes)
MD5: 52404941f393c2aca52686c35b2d04ec
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

%TEMP%\windowsupdatekb12695__7428_il127218.exe

File name: windowsupdatekb12695__7428_il127218.exe
Size: 757.41 KB (757416 bytes)
MD5: 3b9ec3f7d5dba1cb93a00dfd257b8854
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

%TEMP%\windowsupdatekb12695__7428_il739991.exe

File name: windowsupdatekb12695__7428_il739991.exe
Size: 819.89 KB (819896 bytes)
MD5: f0ae707bef12066dfb01f31b3e72bbf8
Detection count: 15
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

%PROGRAMFILES%\amztab\amztab.exe

File name: amztab.exe
Size: 383.48 KB (383488 bytes)
MD5: f2c40060b683471e49ae592c3256b09f
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\amztab
Group: Malware file
Last Updated: September 14, 2016

%TEMP%\WindowsUpdateKB12695__7428_il29343_26.exe

File name: WindowsUpdateKB12695__7428_il29343_26.exe
Size: 394.27 KB (394272 bytes)
MD5: 7b44d47fea832fdf334ebc8635207f5f
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 21, 2019

%TEMP%\windowsupdatekb12695__7428_il67078.exe

File name: windowsupdatekb12695__7428_il67078.exe
Size: 619.74 KB (619744 bytes)
MD5: 3257b603417d58ce4383d25468260fb0
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

%TEMP%\windowsupdatekb12695__7428_il29343.exe

File name: windowsupdatekb12695__7428_il29343.exe
Size: 6.03 MB (6034456 bytes)
MD5: f206b06cfa868f1e851ed24a71634a66
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

%TEMP%\windowsupdatekb12695__7428_il182584.exe

File name: windowsupdatekb12695__7428_il182584.exe
Size: 5.74 MB (5743728 bytes)
MD5: 959fe6a926e56bbf418aa5e27e14986b
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 18, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{117270FA-48AC-45BB-9171-B63D1B42A910}{363BB65D-1747-4826-B445-1DA6244E2037}{67BD9EEB-AA06-4329-A940-D250019300C9}{9EDC0C90-2B5B-4512-953E-35767BAD5C67}{A0EE0278-2986-4E5A-884E-A3BF0357E476}{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}{BE29257C-C317-4DDF-B912-D76A146A04D6}Regexp file mask%PROGRAMFILES%\amztab\amztab.exe%PROGRAMFILES%\cmdidx\cmdidx.exe%PROGRAMFILES%\Controller\cohc.exe%PROGRAMFILES%\igfx32\igfx32.exe%PROGRAMFILES%\ktip\ktip.exe%PROGRAMFILES%\nplus\nplus.exe%WINDIR%\chromebrowser.exeHKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}

Additional Information

The following directories were created:

%APPDATA%\SwvUpdater%LOCALAPPDATA%\41%LOCALAPPDATA%\SwvUpdater%PROGRAMFILES%\Dondox%PROGRAMFILES%\NixController