Multi-License Discount Quote

Change Region

English
Threat Database Potentially Unwanted Programs PUP.Patcher.FB

PUP.Patcher.FB

By CagedTech in Potentially Unwanted Programs

The detection of PUP.Patcher.FB on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It is essential to understand the nature of this threat and take appropriate steps to remove it and prevent future infections.

What Is PUP.Patcher.FB?

PUP.Patcher.FB is a type of malware that is classified as a potentially unwanted program. This means that while it may not be as harmful as other types of malware, such as viruses or Trojans, it can still cause problems with your system and compromise your privacy. PUPs are often installed unintentionally, and they can be difficult to remove without the right tools and knowledge.

How PUP.Patcher.FB Operates

PUP.Patcher.FB, like other PUPs, operates by installing itself on your system and then executing its payload. This can happen through various means, such as downloading and installing software from untrusted sources, clicking on suspicious links or ads, or opening malicious email attachments. Once installed, PUP.Patcher.FB can start to cause problems, such as displaying unwanted ads, collecting your personal data, or slowing down your system's performance.

Symptoms of Infection

If your system is infected with PUP.Patcher.FB, you may notice several symptoms. These can include unwanted ads or pop-ups, slow system performance, unfamiliar programs or icons on your desktop, or changes to your browser's settings or homepage. You may also notice that your system is crashing or freezing more frequently, or that your personal data is being collected or transmitted without your consent.

  • Unwanted ads or pop-ups
  • Slow system performance
  • Unfamiliar programs or icons on your desktop
  • Changes to your browser's settings or homepage
  • System crashes or freezes
  • Unauthorized collection or transmission of personal data

How to Remove PUP.Patcher.FB

  1. Boot your system in Safe Mode with Networking to prevent PUP.Patcher.FB from loading and to allow you to download and install removal tools.
  2. Download and install a reputable anti-malware tool, such as SpyHunter, and perform a full scan of your system to detect and remove PUP.Patcher.FB and any other malware that may be present.
  3. Uninstall any suspicious programs that may be related to PUP.Patcher.FB, and be cautious when installing new software to avoid unintentionally installing PUPs.
  4. Reset your browser settings to their default values, including Chrome, Firefox, and Edge, to remove any changes made by PUP.Patcher.FB.
  5. Reboot your system and perform a follow-up scan with your anti-malware tool to ensure that PUP.Patcher.FB has been completely removed and that your system is clean.

Conclusion

Removing PUP.Patcher.FB from your system requires careful attention to detail and the right tools. By following the steps outlined above, you can help to ensure that your system is clean and free from this potentially unwanted program. It is also essential to take preventative measures to avoid future infections, such as being cautious when downloading and installing software, avoiding suspicious links and ads, and keeping your operating system and software up to date. By taking these steps, you can help to protect your system and your personal data from the risks associated with PUP.Patcher.FB and other types of malware.

Analysis Report

General information

Family Name: PUP.Patcher.FB
Signature status: Hash Mismatch

Known Samples

MD5: 190195043ec21ce9ed647aa94c3c9e19
SHA1: d4b5311750ae3c99a384f2e777dee90ff2dc8230
SHA256: 55724866ADB6DD24EBFBB2873D7F5A383776A513AD755C8D2C476C57764490AF
File Size: 319.13 KB, 319128 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File has TLS information
  • File is 64-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

Digital Signatures

Signer Root Status
PxQuwC.projects.google.com PxQuwC.projects.google.com Hash Mismatch

File Traits

  • No Version Info
  • x64

Block Information

Total Blocks: 1,035
Potentially Malicious Blocks: 17
Whitelisted Blocks: 1,018
Unknown Blocks: 0

Visual Map

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 x 0 0 0 0 0 0 0 0 0 0 x x x x x x x 0 0 0 0 0 0 0 0 0 0 x 0 0 0 x x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 0 1 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • Downloader.UA

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQueryVolumeInformationFile
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtWriteFile
  • UNKNOWN
Service Control
  • StartServiceCtrlDispatcher

Related Posts

Trending

Most Viewed

Loading...