PUP.Anti-Malware Pro

Published:
Last updated:

Threat Scorecard

Threat Level: 10 % (Normal)
Infected Computers: 182
First Seen: March 27, 2019
Last Seen: October 24, 2025
OS(es) Affected: Windows

The detection of PUP.Anti-Malware Pro on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It is essential to understand the nature of this threat and take immediate action to remove it from your system.

What Is PUP.Anti-Malware Pro?

PUP.Anti-Malware Pro is a type of potentially unwanted program that may be installed on your system without your knowledge or consent. This program may claim to offer anti-malware protection, but its primary purpose is to generate revenue for its developers through various means, such as displaying advertisements, collecting user data, or promoting other PUPs. PUPs like PUP.Anti-Malware Pro can compromise your system's security and put your personal data at risk.

How PUP.Anti-Malware Pro Operates

PUP.Anti-Malware Pro operates by exploiting vulnerabilities in your system's security or by tricking you into installing it. Once installed, it may start displaying fake alerts, warnings, or scan results to convince you that your system is infected with malware. This tactic is designed to scare you into purchasing the full version of the program or subscribing to its services. In reality, PUP.Anti-Malware Pro may not provide any genuine anti-malware protection, and its actions can lead to further system compromise.

Symptoms of Infection

The symptoms of PUP.Anti-Malware Pro infection may vary, but common signs include unwanted pop-ups, slow system performance, and suspicious program installations. You may also notice that your browser settings have been altered, or that unfamiliar programs are running in the background. If you suspect that your system is infected with PUP.Anti-Malware Pro, it is crucial to take immediate action to remove it and prevent further damage.

How to Remove PUP.Anti-Malware Pro

  1. Boot your system in Safe Mode with Networking to prevent PUP.Anti-Malware Pro from loading and to allow for a more effective removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of PUP.Anti-Malware Pro and other potential threats.
  3. Uninstall any suspicious programs that may be related to PUP.Anti-Malware Pro from your system's Control Panel or Settings app.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any unwanted extensions or add-ons that may be associated with PUP.Anti-Malware Pro.
  5. Reboot your system and perform another scan with your anti-malware tool to ensure that all remnants of PUP.Anti-Malware Pro have been removed.

Conclusion

Removing PUP.Anti-Malware Pro from your system is essential to prevent further damage and protect your personal data. By following the steps outlined above, you can effectively remove this potentially unwanted program and restore your system's security and performance. Remember to always be cautious when installing software, and never click on suspicious links or download attachments from unknown sources. Keeping your system and anti-malware tools up to date is also crucial in preventing future infections and ensuring your online safety.

SpyHunter Detects & Remove PUP.Anti-Malware Pro

File System Details

PUP.Anti-Malware Pro may create the following file(s):
# File Name MD5 Detections
1. sprunst.exe 21c10bc9df96f1f045e85fd1247f67c4 64
2. Anti-MalwarePro-Installer-2017.exe 1b46b6d36b6b8c860c30bf9a3e089b08 24
3. AntiMalwarePro.exe f8066f22c51975098772bd56dcfe652c 0
More files

Analysis Report

General information

Family Name: PUP.Anti-Malware Pro
Signature status: Self Signed

Known Samples

MD5: 17959a4d1a185e67fb6f48aad318701c
SHA1: 2936defdec93cc4a0a963d2da95468dae416a727
SHA256: 51E6455AEEE917F3467B836FEBFAF0BB4B8FA3984A7F5733A4AAA69F984120F9
File Size: 1.77 MB, 1769880 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File is 32-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

Windows PE Version Information

Name Value
File Description AMPro Service
File Version 1.5.0.0
Product Version 1.6.0.0

Digital Signatures

Signer Root Status
Anti Malware Inc. Symantec Class 3 SHA256 Code Signing CA Self Signed

Block Information

Total Blocks: 2,757
Potentially Malicious Blocks: 649
Whitelisted Blocks: 1,959
Unknown Blocks: 149

Visual Map

0 0 0 0 0 0 0 0 0 0 0 ? 0 ? ? ? 0 ? 0 ? ? ? ? ? ? ? x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? x x x x ? ? ? ? 0 0 0 x x ? 0 x x 0 ? ? ? ? ? x x 0 ? x ? ? ? ? x ? ? ? ? ? x ? ? ? ? ? ? 0 ? ? ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 x 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? ? ? x ? ? 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x 0 0 x x ? ? ? ? 0 0 0 x x x x x x x 0 x x x x 0 x x x x x x x 0 0 x x x 0 x x 0 x x x x x x x x x x 0 x 0 0 0 x x x x x 0 0 ? ? ? ? 0 ? 0 0 ? ? ? ? 0 0 0 0 ? 0 0 0 0 ? ? x x x x ? ? ? ? ? ? ? ? x x x x x x x x x x x 0 0 0 0 ? ? ? ? ? ? ? ? ? ? ? 0 x 0 ? ? ? 0 ? ? ? x 0 0 0 0 0 ? 0 x 0 ? 0 0 0 ? 0 0 0 0 0 x 0 ? x 0 ? ? 0 ? x x 0 0 x x x 0 0 0 ? x ? ? ? ? 0 0 0 0 0 0 ? ? 0 x x ? 0 0 0 0 0 0 ? ? ? x x x 0 x x ? x 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 x 0 0 ? 0 0 0 ? 0 x ? x x ? x ? x ? ? ? x 0 0 0 0 x 0 0 0 0 ? ? x ? x ? x x x x 0 x x 0 0 ? x ? 0 0 0 0 0 0 0 0 0 0 0 ? ? ? ? x x 0 0 x 0 0 0 0 0 0 0 x x x 0 0 0 0 0 x x x x x x x 0 x ? ? 0 0 0 0 0 ? ? 0 x x x x x x x x ? x ? ? 0 x x x x x x 0 x x x ? ? x ? x ? x 0 0 0 0 0 0 x x x x x x x x 0 0 x 0 x x x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 x x 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 1 0 x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 x 0 x x 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 x 0 0 0 0 0 x x 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 x 0 0 x x 0 0 0 0 0 0 0 0 0 x 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 x 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 x x 0 x x 0 x 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 x 0 0 0 0 0 0 0 x 0 0 0 0 x 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 x 0 x 0 0 0 0 0 x 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 x 0 0 0 0 x 0 0 0 0 0 0 x 0 x 0 0 0 0 0 x 0 0 x x x x x x x 0 x 0 x 0 0 0 x 0 0 0 0 0 x 0 x x x x 0 0 x 0 x 0 x 0 x 0 x x x 0 0 0 0 0 0 0 x x 0 0 0 x 0 x x x x x 0 0 0 0 0 x 0 0 x x 0 x x x 0 x 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 x x x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 x 0 0 x x x x 0 x x x 0 0 0 0 0 0 0 0 0 x 0 0 0 x x x x 0 0 x 0 x 0 x x 0 0 0 0 x 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 x 0 x 0 0 0 0 0 0 x 0 0 x 0 0 x 0 x x x 0 0 0 x x x x x x 0 0 0 0 x 0 0 0 0 0 x x 0 0 0 0 x x 0 x 0 x 0 x 0 x 0 x 0 0 0 0 0 x x 0 0 x x x 0 0 x x 0 0 x x x x x 0 0 0 0 0 x 0 0 0 0 x x x 0 x x x x x 0 0 0 0 0 x x 0 0 0 0 0 0 x x 0 x x 0 0 x x 0 0 0 x 0 0 0 0 x 0 x x x x x 0 x 0 x x x 0 0 0 0 0 0 0 x 0 x x 0 x 0 0 0 0 0 x x x x 0 0 0 0 0 0 0 0 x 0 0 0 x x 0 x 0 x x x x x 0 0 x x 0 0 0 x x 0 x x 0 0 x 0 0 x 0 x 0 x x 0 x x 0 x 0 x 0 x 0 0 0 x 0 0 0 x x 0 0 0 x 0 x 0 0 x 0 0 x 0 x x x 0 0 x 0 x x 0 0 0 0 0 0 x x x x 0 0 0 x x x 0 0 0 0 0 0 x x 0 x x 0 x x x x x x 0 0 0 0 0 0 0 0 x 0 x x 0 x 0 x x 0 0 0 x x x x x 0 0 x x x x x 0 x x 0 0 x 0 x x x 0 0 x 0 0 0 x x 0 0 0 0 x 0 0 x 0 0 x 0 0 0 0 x 0 0 0 0 x x x 0 x 0 x x 0 0 x 0 x x x 0 0 x x x x 0 0 0 x 0 0 0 x x x 0 x x x x x x x x 0 0 0 0 x 0 0 x x x 0 0 x x x x x 0 x 0 x 0 x x x x 0 x 0 x x x x x 0 x 0 x x 0 0 x x x x x x x 0 x x x x x x x x x x x 0 0 x x x x 0 x x 0 x x x 0 x 0 x 0 x x 0 x x x x x x x 0 0 x x 0 0 x x 0 x 0 0 x x 0 x 0 0 x x 0 x 0 0 x 0 0 0 0 x 0 x x x x x x 0 0 x 0 0 x x x x x x x 0 x 0 x 0 x 0 0 0 0 0 x x x x 0 x x x x x x 0 x x x x x x x x 0 0 x 0 0 0 0 x 0 x x 0 x x x x 0 0 x x x 0 0 0 0 x x x x x x x x x 0 x x 0 x x x 0 x x x x x x x 0 0 x x 0 x x x 0 x x x 0 x x x x x x 0 x 0 0 0 0 x x x 0 0 0 x x x 0 0 x x x x x 0 0 x x 0 x x 0 x x 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 0 0 1 0 0 1 1 0 0 0 2 2 0 0 0 0 0 0 1 0 0 1 1 0 0 0 0 1 0 1 0 0 0 0 1 0 0 0 0 0 2 0 0 0 0 0 0 1 0 0 0 0 0 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block