PUP.Skymonk

Published:
Last updated:

Threat Scorecard

Popularity Rank: 11,192
Threat Level: 10 % (Normal)
Infected Computers: 19,620
First Seen: January 20, 2014
Last Seen: October 4, 2026
OS(es) Affected: Windows

The detection of PUP.Skymonk on your system indicates the presence of a potentially unwanted program (PUP) that may be compromising your computer's security and performance. It is essential to understand the nature of this threat and take immediate action to remove it and prevent future infections.

What Is PUP.Skymonk?

PUP.Skymonk is a type of malware that is classified as a potentially unwanted program. This category of threats includes software that may not be malicious in nature but can still cause significant disruptions to your system and compromise your personal data. PUPs often sneak onto your computer through bundled software downloads, infected websites, or phishing emails.

How PUP.Skymonk Operates

PUP.Skymonk, like other PUPs, can operate in various ways to achieve its goals. It may display unwanted advertisements, collect your browsing data, or install additional software without your consent. In some cases, PUPs can also create backdoors for more severe malware infections, making your system vulnerable to further attacks. Understanding how PUP.Skymonk operates is crucial for effective removal and prevention of future infections.

Symptoms of Infection

Identifying the symptoms of a PUP.Skymonk infection can be challenging, as they may resemble issues caused by other system problems. However, common indicators include an increase in pop-up ads, unexpected changes in your browser's homepage or search engine, and a general slowdown in your computer's performance. You might also notice unfamiliar programs installed on your system or find that your browser is being redirected to suspicious websites.

  • Increased advertising pop-ups
  • Changes in browser settings
  • System performance issues
  • Unfamiliar installed programs
  • Browser redirections

How to Remove PUP.Skymonk

  1. Boot your computer in Safe Mode with Networking to prevent PUP.Skymonk from loading and to allow for a more straightforward removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all components of PUP.Skymonk.
  3. Manually uninstall any suspicious programs that you do not recognize or that were installed without your consent.
  4. Reset your web browsers (Chrome, Firefox, Edge) to their default settings to remove any changes made by PUP.Skymonk.
  5. Reboot your computer and perform another full scan with your anti-malware tool to ensure that all remnants of PUP.Skymonk have been removed.

Conclusion

Removing PUP.Skymonk from your system requires careful and thorough steps to ensure that all components of the malware are eliminated. By following the guidance provided, you can effectively remove PUP.Skymonk and take steps to prevent future infections. It is also crucial to maintain good cybersecurity practices, such as regularly updating your software, using strong antivirus programs, and being cautious when downloading software or clicking on links from unknown sources. Remember, prevention and vigilance are key to protecting your computer and personal data from potentially unwanted programs and more severe malware threats.

SpyHunter Detects & Remove PUP.Skymonk

File System Details

PUP.Skymonk may create the following file(s):
# File Name MD5 Detections
1. KangoBHO.dll 5c7703f9d55754ae94a3a6762ba2063c 2,509
2. A0228118.exe 9c7504c35fe0d74191450dda37c1d294 831
3. KangoBHO64.dll 7fbef60a8dc5137b6971050b67fcd2be 665
4. A0192150.exe 28ea6cf6cb79d3125d29e2182b9c6645 15
5. skymonk2.exe c2b1dd471aec25157aca81d69a25a8d2 2
More files

Registry Details

PUP.Skymonk may create the following registry entry or registry entries:
CLSID
{2434971D-DF3B-43DA-B810-7A44F62317A5}
{49203157-9761-467F-B689-D0CCB7E83923}
{49D931C3-97C7-46BF-850F-83CC98E81623}
{88AD246E-288C-4950-BEBF-140DFDD28240}
{88B8244F-28A7-49E3-ABB2-180D65D2E640}
{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
{A9E7CA1D-9850-4FCF-8498-4CDDE83DEA4A}
{E71A8D5A-B484-4D39-9364-40134F50FFE9}
File name without path
Continue installation - SkyMonk Installation.lnk
Skymonk 2.lnk
Software\Classes\skymonk
Software\Microsoft\Internet Explorer\Approved Extensions\{49D931C3-97C7-46BF-850F-83CC98E81623}
Software\Microsoft\Internet Explorer\Approved Extensions\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2434971D-DF3B-43DA-B810-7A44F62317A5}
Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\KangoEngine.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{49D931C3-97C7-46BF-850F-83CC98E81623}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{49D931C3-97C7-46BF-850F-83CC98E81623}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
Software\Microsoft\Windows\CurrentVersion\Run\Skymonk2
Software\Microsoft\Windows\CurrentVersion\Uninstall\Skymonk2
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skymonk2Plugin
Software\Services\Sm2
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2434971D-DF3B-43DA-B810-7A44F62317A5}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\KangoEngine.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Skymonk2Plugin

Directories

PUP.Skymonk may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Skymonk 2
%APPDATA%\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
%LOCALAPPDATA%\Skymonk2
%PROGRAMFILES%\Skymonk2Plugin
%PROGRAMFILES(x86)%\Skymonk2Plugin
%USERPROFILE%\AppData\LocalLow\{A923CA26-988F-4FE5-B1F5-B3DD3F3D6F4A}
%USERPROFILE%\Local Settings\Application Data\Skymonk2

URLs

PUP.Skymonk may call the following URLs:

Skymonk