PUP.GetGo123

The detection of PUP.GetGo123 on your system indicates the presence of a potentially unwanted program (PUP) that may be compromising your computer's security and performance. It is essential to understand the nature of this threat and take immediate action to remove it and prevent potential harm.

What Is PUP.GetGo123?

PUP.GetGo123 is a type of malware that is classified as a potentially unwanted program. This category of threats includes software that may not be malicious in nature but can still cause problems for computer users. PUPs can be installed on a system without the user's knowledge or consent, often bundled with other software or downloaded from untrusted sources. They can display unwanted advertisements, collect user data, or modify system settings, leading to a range of issues.

How PUP.GetGo123 Operates

PUP.GetGo123, like other PUPs, operates by exploiting vulnerabilities in software or using social engineering tactics to trick users into installing it. Once installed, it can start displaying unwanted advertisements, redirecting browser searches, or collecting user data without consent. It may also modify system settings, such as changing the default search engine or homepage, to generate revenue for its creators. PUPs can be challenging to remove due to their ability to integrate deeply into a system, making it crucial to use specialized tools and techniques for their elimination.

Symptoms of Infection

Symptoms of a PUP.GetGo123 infection can vary but commonly include an increase in unwanted advertisements, unexpected changes to browser settings, and slower system performance. Users may also notice unfamiliar programs or toolbars installed on their computer or find that their search results are being redirected to suspicious websites. In some cases, PUPs can lead to more severe issues, such as data breaches or the installation of additional malware, emphasizing the need for prompt removal.

How to Remove PUP.GetGo123

1. Boot your computer in Safe Mode with Networking to prevent PUP.GetGo123 from loading and to allow for a more straightforward removal process.
2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system. This will help identify and remove all components of the PUP.
3. Uninstall any suspicious programs that were installed around the time the PUP was detected. Be cautious and only remove programs you are certain are not needed.
4. Reset your web browsers (Chrome, Firefox, Edge) to their default settings to remove any changes made by the PUP, such as altered homepages or search engines.
5. After completing the above steps, reboot your computer and perform another scan with your anti-malware tool to ensure all remnants of PUP.GetGo123 have been removed.

Conclusion

Removing PUP.GetGo123 requires careful attention to detail and the use of appropriate tools. By following the steps outlined above, you can effectively eliminate this potentially unwanted program from your system and restore your computer's performance and security. It's also crucial to adopt preventive measures, such as being cautious with downloads, using reputable antivirus software, and regularly updating your operating system and applications, to avoid future infections. Remember, vigilance and proactive security practices are key to maintaining a safe and healthy computing environment.

Analysis Report

General information

Family Name:	PUP.GetGo123
Signature status:	Self Signed

Known Samples

i

Known Samples

This section lists other file samples believed to be associated with this family.

MD5: 50b7efd02ba8eb6ef71c23cb86fc4334 SHA1: 8d1bea44d2f41eb1f46c439a5af65ca5348e8e83 SHA256: 958DB2CC348933A3CDE8737026B5500638EC98E33BF9D79F5A24A82A7FD4F54A File Size: 7.54 MB, 7541552 bytes

Windows Portable Executable Attributes

i

Windows Portable Executable Attributes

This section lists file attributes found within family samples. These attributes are extracted from the files’ Windows PE (Portable Executable) specification and various system flags. Portable Executable Attributes give malware researchers insight into a file’s functionality, executable details, platform and runtime environment.

• File doesn't have "Rich" header
• File doesn't have debug information
• File doesn't have exports table
• File doesn't have relocations information
• File is 32-bit executable
• File is either console or GUI application
• File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
• File is Native application (NOT .NET application)
• File is not packed
• IMAGE_FILE_DLL is not set inside PE header (Executable)

Show More

• IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

i

File Icons

This section displays icon resources found within family samples. Malware often replicates icons commonly associated with legitimate software to mislead users into believing the malware is safe.

Digital Signatures

i

Digital Signatures

This section lists digital signatures that are attached to samples within this family. When analyzing and verifying digital signatures, it is important to confirm that the signature’s root authority is a well-known and trustworthy entity and that the status of the signature is good. Malware is often signed with non-trustworthy “Self Signed” digital signatures (which can be easily created by a malware author with no verification). Malware may also be signed by legitimate signatures that have an invalid status, and by signatures from questionable root authorities with fake or misleading “Signer” names.

Signer	Root	Status
GetGo Software Ltd.	GetGo Software Ltd.	Self Signed

Files Modified

i

Files Modified

This section lists files that were created, modified, moved and/or deleted by samples in this family. File system activity can provide valuable insight into how malware functions on the operating system.

File	Attributes
c:\users\user\appdata\local\temp\nsjb905.tmp	Generic Read,Write Data,Write Attributes,Write extended,Append data,Delete
c:\users\user\appdata\local\temp\nsjb906.tmp\askbarsetup.exe	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\askheader.bmp	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\askinstallchecker.exe	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\askscreen.bmp	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\header.bmp	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\modern-header.bmp	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\modern-wizard.bmp	Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\modern-wizard.bmp	Synchronize,Write Attributes
c:\users\user\appdata\local\temp\nsjb906.tmp\nsdialogs.dll	Generic Write,Read Attributes

Show More

c:\users\user\appdata\local\temp\nsjb906.tmp\system.dll

Generic Write,Read Attributes