McAfee > Theat Center > Virus Detail Page

Overview

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Characteristics

This program is detected as a "potentially unwanted application".  It is neither a virus nor a trojan.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

There are different variants of this program.  The description is a general guide. 

Upon execution, the application connects to a specific website.  It might upload certain machine information, such as user name, ip, os, etc.  It downloads a compressed file, usually in a name of "file.zip".  It then uncompresses and launches the file.  The file can be dll or exe. 

The following registry keys are created:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
  Run "srng" = "\Program Files\Srng\Srng.exe"
• HKEY_LOCAL_MACHINE\SOFTWARE\Srng

The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has also an option, which enables users to detect this kind of program automatically (see below).

Symptoms

N/A This is neither a virus nor a trojan.

Method of Infection

N/A This is not a virus or trojan

Removal

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants

N/A

All Information

Overview -

This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

Characteristics

Characteristics -

This program is detected as a "potentially unwanted application".  It is neither a virus nor a trojan.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

There are different variants of this program.  The description is a general guide. 

Upon execution, the application connects to a specific website.  It might upload certain machine information, such as user name, ip, os, etc.  It downloads a compressed file, usually in a name of "file.zip".  It then uncompresses and launches the file.  The file can be dll or exe. 

The following registry keys are created:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
  Run "srng" = "\Program Files\Srng\Srng.exe"
• HKEY_LOCAL_MACHINE\SOFTWARE\Srng

The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has also an option, which enables users to detect this kind of program automatically (see below).

Symptoms

Symptoms -

N/A This is neither a virus nor a trojan.

Method of Infection

Method of Infection -

N/A This is not a virus or trojan

Removal -

Removal -

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants -

N/A