Home Possibly Unwanted Program PUP.VuuPC

PUP.VuuPC

Posted: February 18, 2014

Threat Metric

Ranking: 3,083
Threat Level: 1/10
Infected PCs: 528,724
First Seen: February 18, 2014
Last Seen: February 25, 2025
OS(es) Affected: Windows


VuuPC is a potentially unwanted program that could cause several unwanted and annoying actions on your computer. The VuuPC application may load through previously installed freeware programs or bundled software applications. When it is loaded, VuuPC may then change your default home page or cause unwanted redirects to questionable sites. Additionally, VuuPC could be associated with various advertisement pop-ups that eventually cause your web browser to perform poorly limiting your ability to surf the internet. The effects of VuuPC may be reversed by removing the VuuPC program and all of its associated files. This includes the removal of plugins or add-on components that may have loaded when VuuPC was installed. Automatically performing removal of VuuPC may take the use of an updated antimalware tool.

Aliases

Adware.Downware.1411 [DrWeb]Artemis!B2F2603C878D [McAfee]Artemis!11D2069CB451 [McAfee]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\System Volume Information\_restore{DD0CF2F7-77D2-4945-B346-6B5613DA5B5D}\RP70\A0048121.exe File name: A0048121.exe
Size: 4.74 MB (4747280 bytes)
MD5: 6ea1dbb7c5f782270be95ac42594da5a
Detection count: 19,601
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{DD0CF2F7-77D2-4945-B346-6B5613DA5B5D}\RP70\A0048121.exe
Group: Malware file
Last Updated: December 25, 2021
C:\System Volume Information\_restore{DD0CF2F7-77D2-4945-B346-6B5613DA5B5D}\RP70\A0048117.exe File name: A0048117.exe
Size: 2.96 MB (2967568 bytes)
MD5: 05fa800a556a34d60423b90becb1fa3d
Detection count: 18,193
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{DD0CF2F7-77D2-4945-B346-6B5613DA5B5D}\RP70\A0048117.exe
Group: Malware file
Last Updated: December 25, 2021
C:\System Volume Information\_restore{DD0CF2F7-77D2-4945-B346-6B5613DA5B5D}\RP70\A0048118.exe File name: A0048118.exe
Size: 1.98 MB (1982992 bytes)
MD5: 7cba20ec5985c3bbe0fface09e71db67
Detection count: 5,211
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{DD0CF2F7-77D2-4945-B346-6B5613DA5B5D}\RP70\A0048118.exe
Group: Malware file
Last Updated: December 25, 2021
C:\Users\<username>\AppData\Local\VuuPCBaseSetup_ztlbr.exe File name: VuuPCBaseSetup_ztlbr.exe
Size: 288.44 KB (288448 bytes)
MD5: 53d05a864a5e0dd052ca8b9f371169c1
Detection count: 3,401
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\VuuPCBaseSetup_ztlbr.exe
Group: Malware file
Last Updated: June 7, 2024
%SYSTEMDRIVE%\Qoobox\Quarantine\C\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\nsv15E.tmp.vir File name: nsv15E.tmp.vir
Size: 301.6 KB (301608 bytes)
MD5: 8c3b43f5c06064f59f2694890658d8e8
Detection count: 2,850
Mime Type: unknown/vir
Path: %SYSTEMDRIVE%\Qoobox\Quarantine\C\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\nsv15E.tmp.vir
Group: Malware file
Last Updated: February 25, 2025
C:\Users\<username>\AppData\Local\nsr4D8B.tmp File name: nsr4D8B.tmp
Size: 301.49 KB (301496 bytes)
MD5: 4f88d171466186bb48ff3d9ca7d6c912
Detection count: 974
File type: Temporary File
Mime Type: unknown/tmp
Path: C:\Users\<username>\AppData\Local\nsr4D8B.tmp
Group: Malware file
Last Updated: February 12, 2025
%SYSTEMDRIVE%\Users\<username>\AppData\Local\nsm3556.tmp File name: nsm3556.tmp
Size: 260.87 KB (260876 bytes)
MD5: f6cc5c35eaa19bca876d1ddc4d103cb3
Detection count: 911
File type: Temporary File
Mime Type: unknown/tmp
Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\nsm3556.tmp
Group: Malware file
Last Updated: February 13, 2024
%USERPROFILE%\Local Settings\Application Data\VuuPCBaseSetup[1].exe File name: VuuPCBaseSetup[1].exe
Size: 295.72 KB (295728 bytes)
MD5: d5c319cd664f01ffb74f71fb4dc205e8
Detection count: 597
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Local Settings\Application Data
Group: Malware file
Last Updated: August 28, 2020
%PROGRAMFILES(x86)%\vuupc\connectivity.exe File name: connectivity.exe
Size: 4.74 MB (4747280 bytes)
MD5: 8551cf01976fa9e74e48e3f99c6c935f
Detection count: 571
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\vuupc\connectivity.exe
Group: Malware file
Last Updated: November 12, 2022
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VuuPC\Connectivity.exe.vir File name: Connectivity.exe.vir
Size: 4.74 MB (4747280 bytes)
MD5: 1fe88bb9a71d5a59b74f732c9c87fd32
Detection count: 534
Mime Type: unknown/vir
Path: C:\AdwCleaner\Quarantine\C\Program Files (x86)\VuuPC\Connectivity.exe.vir
Group: Malware file
Last Updated: January 7, 2023
C:\AdwCleaner\Quarantine\C\Program Files (x86)\VuuPC\RemoteEngine.exe.vir File name: RemoteEngine.exe.vir
Size: 2.96 MB (2967568 bytes)
MD5: 9a70ac881602b373b5f425c9a5351c54
Detection count: 525
Mime Type: unknown/vir
Path: C:\AdwCleaner\Quarantine\C\Program Files (x86)\VuuPC\RemoteEngine.exe.vir
Group: Malware file
Last Updated: January 7, 2023
C:\Users\<username>\AppData\Local\VuuPCSetup.exe File name: VuuPCSetup.exe
Size: 295.72 KB (295728 bytes)
MD5: e558b1be7e3616c33626fc2560eea31c
Detection count: 422
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\VuuPCSetup.exe
Group: Malware file
Last Updated: August 5, 2023
%PROGRAMFILES(x86)%\VuuPC\VuuPCUpdater.exe File name: VuuPCUpdater.exe
Size: 73.05 KB (73056 bytes)
MD5: 666778f98a6ae6ed3534b83cc1b715c7
Detection count: 398
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\VuuPC\VuuPCUpdater.exe
Group: Malware file
Last Updated: July 8, 2023
C:\System Volume Information\_restore{1D643A6B-240D-4B93-90A8-814B6D37D8AA}\RP19\A0008513.exe File name: A0008513.exe
Size: 4.74 MB (4746768 bytes)
MD5: ae2e072b0011e745a51ee65d3ef76bbd
Detection count: 375
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{1D643A6B-240D-4B93-90A8-814B6D37D8AA}\RP19\A0008513.exe
Group: Malware file
Last Updated: April 22, 2021
C:\Windows.old.000\Program Files\VuuPC\RemoteEngineHelper.exe File name: RemoteEngineHelper.exe
Size: 1.98 MB (1982992 bytes)
MD5: 6011a4ecc50b117754acbea897565703
Detection count: 192
File type: Executable File
Mime Type: unknown/exe
Path: C:\Windows.old.000\Program Files\VuuPC\RemoteEngineHelper.exe
Group: Malware file
Last Updated: October 25, 2022
C:\Program Files\VuuPC\VuuPCLicense.exe File name: VuuPCLicense.exe
Size: 87.14 KB (87144 bytes)
MD5: 50c95446314f01ad2866e1fc451195aa
Detection count: 150
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\VuuPC\VuuPCLicense.exe
Group: Malware file
Last Updated: June 28, 2022
E:\$RECYCLE.BIN\S-1-5-21-3519219785-4035286574-1555412101-1000\$RFRYPCJ.exe File name: $RFRYPCJ.exe
Size: 591.9 KB (591904 bytes)
MD5: ca3edb923f1e762d820ea3d3830e88d5
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Path: E:\$RECYCLE.BIN\S-1-5-21-3519219785-4035286574-1555412101-1000\$RFRYPCJ.exe
Group: Malware file
Last Updated: June 15, 2022
D:\Installs\VuuPC_Setup.exe File name: VuuPC_Setup.exe
Size: 622.11 KB (622112 bytes)
MD5: d9530aa9975e98ee095465922923d414
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: D:\Installs
Group: Malware file
Last Updated: June 2, 2016
%LOCALAPPDATA%\VuuPCBaseSetup.exe File name: VuuPCBaseSetup.exe
Size: 295.72 KB (295728 bytes)
MD5: 514f9ce13fee21dbc48e02d3798230bd
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: June 2, 2016
%LOCALAPPDATA%\VuuPCBaseSetupIM.exe File name: VuuPCBaseSetupIM.exe
Size: 291.68 KB (291688 bytes)
MD5: ecf4987ec78d8559a7e033c0c6701b1d
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: June 2, 2016
C:\Windows.old.000\Users\<username>\AppData\Local\Temp\VuuPCSetup_full.exe File name: VuuPCSetup_full.exe
Size: 7.72 MB (7724216 bytes)
MD5: 161d08470f5cb732cab3d5d3435cd941
Detection count: 56
File type: Executable File
Mime Type: unknown/exe
Path: C:\Windows.old.000\Users\<username>\AppData\Local\Temp\VuuPCSetup_full.exe
Group: Malware file
Last Updated: November 20, 2022
%APPDATA%\InstallW\IWsrv.exe File name: IWsrv.exe
Size: 73.21 KB (73216 bytes)
MD5: d4d531b0e1da5fcd3221e447cb0953b1
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\InstallW
Group: Malware file
Last Updated: March 24, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathContinue VuuPC Installation.lnkMy VuuPC.lnkRegexp file mask%windir%\System32\Tasks\VuuPC[RANDOM CHARACTERS]HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\VuuPCUpdateSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\VuuPCUpdateLoginSYSTEM\ControlSet001\services\RemoteEngineServiceSYSTEM\ControlSet001\services\VuuPCConnectivitySYSTEM\ControlSet002\services\RemoteEngineServiceSYSTEM\ControlSet002\services\VuuPCConnectivitySYSTEM\CurrentControlSet\services\RemoteEngineServiceSYSTEM\CurrentControlSet\services\VuuPCConnectivityHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}VuuPC

Additional Information

The following directories were created:
%APPDATA%\InstallW%APPDATA%\Microsoft\Windows\Start Menu\Programs\VuuPC%PROGRAMFILES%\VuuPC%PROGRAMFILES(x86)%\VuuPC
Loading...