What is a PUP (potentially unwanted program)? Risks and protection

What is a PUP (potentially unwanted program)?

A PUP, or potentially unwanted program, is an annoying or frustrating software program that runs in the background of your computer. Unlike malware, PUPs are not usually intended to be malicious, but they can still damage your device if you’re not careful. 

For example, PUPs could cause intrusive pop-up ads while you’re trying to work or change your system settings without your consent. Some PUPs can even slow down your computer’s operations. 

Another difference between a PUP and malware is that PUPs are technically installed with your consent. However, many PUPs will manipulate you into providing that consent, rather than asking for it outright. For example, PUPs often come bundled when you download another free software program. 

PUP vs. PUA: What’s the difference?

An unwanted program running on a computer is called a potentially unwanted program (PUP) or potentially unwanted application (PUA). These two terms can be used interchangeably because both refer to a software program with annoying or otherwise unwanted behavior. 

What is a potentially unwanted search engine (PUSE)?

A potentially unwanted search engine (PUSE) is a search engine or browser extension that is installed through bundled software or unclear prompts and changes browser search settings in ways users may not fully expect or intend. It may set itself as the default search engine, modify browser behavior, and collect or share search data with third parties.

Are PUPs malware or viruses?

PUPs are not the same as malware or viruses. While malware and viruses are designed to be deliberately harmful, PUPs are usually not intentionally malicious. 

Another key difference is consent. Malware and viruses are always installed without your consent, usually as part of a cyberattack. PUPs are only installed with some form of consent, although the software provider may manipulate you to get that consent. PUP software downloads are usually bundled with other programs so you don’t notice them at first, with details hidden deep in the fine print. 

How do PUPs get onto your device?

A PUP can get onto your device in several ways.

• Software bundling: The PUP’s developer bundles it with another more popular software program, so you’ll inadvertently download both at the same time. 
• Deceptive advertising: A software developer might advertise a PUP as a helpful tool, when really it functions more like adware. 
• Fake installers or updates: PUP developers might hide these programs in a fake installer or update for another program, so you download them without realizing it. 
• Automatic download sites: In rare cases, PUPs are hidden in websites where a download starts automatically without you realizing it. 

Common types of PUPs

Knowing the common types of PUPs can make them easier to spot. Most of these programs are designed to show you ads, collect information from you, or sell you things, unlike many types of malware which are designed to cause harm. 

Adware

Adware is the most common type of PUP. These programs display annoying pop-up ads on your device. They may even require you to click on the ads in order to close them, which can slow you down or interfere with your activities. 

Browser hijackers

A browser hijacker is a software program that modifies the settings on your web browser without your consent. For example, it may change your default search engine or redirect you to a specific website. The creators of the PUP often do this to generate fraudulent ad revenue. 

Toolbars and browser extensions

Some PUPs install toolbars on your operating system, or install extensions on your browsers. These features may look useful, but they’re often designed to collect your personal information or show you disruptive ads. 

System optimizers and registry cleaners

These PUPs falsely claim that they will remove unnecessary files from your device and help your operating system run faster. However, they’re more likely to slow down your system instead. 

Fake security software

Also known as scareware, this type of PUP is designed to look like legitimate security software. It will tell you that you have malware or a virus on your computer, but in reality, the software is trying to trick you into spending money or even downloading malware to fix the problem. 

List of well-known PUPs

Here are some of the most well-known PUPs to avoid while you’re online. You’ll find many of these on our list of most dangerous cybersecurity threats. While they’re unlikely to cause severe harm on their own, they could lead to more serious cyberattacks in the long run: 

1. 1.Conduit Toolbar
2. 2.Superfish 
3. 3.Crossrider / Sambreel adware
4. 4.Adware:Win32/Eorezo
5. 5.InstallCore
6. 6.Amonetize
7. 7.KDataCollector
8. 8.CoinMiner bundled tools
9. 9.NiceHash miners

These downloads often come bundled with popular free software programs like PDF readers, media players, or download managers. Always research the programs you’re downloading first to make sure they’re legitimate. 

What are the risks of PUPs?

Having a PUP on your computer can expose you to a wide range of cybersecurity vulnerabilities.

• Performance issues: Your computer may run more slowly than normal. 
• Privacy concerns: A PUP could sell your personal information to third parties, often for targeted advertising purposes. 
• Security vulnerabilities: Some PUPs will make your system more vulnerable to viruses and data loss. 
• Annoying user experience: PUPs cause frequent pop-ups and ads, which can be very annoying when you’re trying to use your computer. 
• Gateway to malware: Some PUPs will encourage you to download more dangerous malware programs. 

How to recognize PUPs on your device

It’s important to know how to spot a PUP so you can remove it from your device right away. Here are some common signs to look for: 

• You notice excessive pop-up ads that interfere with your activities.
• Ads start appearing in strange places.
• Your default homepage or search engine changes without your permission.
• Your computer is running significantly slower than usual. 
• Your browser starts redirecting you to unexpected websites. 

If you notice these signs, start looking for the PUP so you can remove it. Here are some places to check:

• Your browser’s extensions or add-ons list
• Programs and Features (Windows devices)
• Applications folder (Mac devices)
• Browser settings
• System startup programs

How to protect yourself from PUPs

There are a few basic steps you can take to protect yourself from PUPs online. Here’s what to do: 

• Download software only from official websites or trusted sources. If you’re not sure if a third-party site is safe, err on the side of caution and look for an official source. 
• Be skeptical of bold claims. For example, a software program might claim that you have an urgent virus that it can remove, or that it can speed up your operating system. 
• Keep an eye out for manipulative user interfaces. For example, a PUP’s download page might have “decline” or “skip” buttons that are so small they are difficult to see. This makes visitors think there’s no way out of the download. 
• Don’t click on suspicious ads or fake download buttons. You might notice these on strange websites or scammy emails. 
• Keep your operating system and all your software programs updated. Hackers often exploit outdated programs and devices to encourage you to download suspicious programs. 
• Install a reputable antivirus and anti-malware software that detects PUPs and prevents you from downloading them. You may have to manually enable PUP detection in your security software. 
• Add a reputable ad blocker and anti-tracking tool to your web browser. For example, NordVPN’s Threat Protection Pro can help you stay safe.  

When installing a new software program, always follow these steps to avoid accidentally downloading a PUP: 

• If available, choose a “Custom” or “Advanced” installation process instead of “Express” or “Quick setup.”
• Review every checkbox option before moving onto the next page. Watch out for choices like “Install toolbar” or “Set [site] as my homepage.” Deselect any pre-checked boxes you don’t want. 
• Read each installation screen thoroughly, including any fine print. 
• Decline any recommended additional program downloads.

How to remove PUPs from your device

If you have found a PUP on your device, don’t panic. Follow the steps below to remove it.

Removing PUPs on Windows

Here’s how to remove a PUP on a Windows 11 device. Unfortunately, many people will need PC App Store adware removal after downloading free or unsecured software.

1. 1.Open the Settings on your device. 
2. 2.Navigate to Apps and then Installed Apps
3. 3.Scroll through the list to find the offending app
4. 4.Click the three dots on the right side of the menu. 
5. 5.Click “Uninstall”. 

Removing PUPs on Mac

If you have a Mac, the process of removing a PUP is similar. You can also use similar steps to remove adware from your phone if you have an iPhone. 

1. 1.Open the Finder, select “Go” from the top menu bar, then select “Utilities.” 
2. 2.Open the Activity Monitor. Scroll through all open files to find the PUP. 
3. 3.Go back to the Finder and select “Go” from the top menu bar again. Then, select “Go to folder.”
4. 4.Search for /Library/LaunchAgents. This will bring up a list of program files on your computer. 
5. 5.Delete all files related to the PUP. 
6. 6.Empty the trash. 

Additional steps

If you’re struggling to get rid of a PUP, it may be because it’s a browser extension instead of an app. Go through your browser extensions to find and delete the PUP, then reset your browser to default settings. You may also need to clear your cache and cookies. 

A specialized anti-malware tool may also be able to remove PUPs. For example, NordVPN’s Threat Protection Pro helps remove these files. 

PUPs vs. other types of unwanted software

A PUP is just one of a few different categories of unwanted software programs. Here are some of the others:

• PUPs vs. grayware. Grayware is a broad category of any software that falls in between legitimate software and malware. It includes PUPs. 
• PUPs vs. riskware. Riskware is a type of legitimate software that could cause security risks if misused. A PUP is something you actively do not want on your computer.