Riskware/PUP

description-logoAnalysis



This detection is for installers of applications that bundle themselves with toolbars or Browser Helper Objects (BHOs) that usually display some form of adverstisement. The detection does not indicate the presence of malware, but is used to classify software with possibly unwanted behavior that may be a potential risk to users.
Riskware applications usually affect productivity and are thus not useful in a corporate environment.
A few noticeable bundles that have been observed were made with NSIS, WiseInstaller, and SmartInstaller.
Below are screenshots of some of the installation packages:


  • Figure 1: Installation prompt example 1.


  • Figure 2: Installation prompt example 2.


  • Figure 3: Installation prompt example 3.


  • Figure 4: Installation prompt example 4.

recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiGate
FortiClient
FortiAPS
FortiAPU
FortiMail
FortiSandbox
FortiWeb
Web Application Firewall
FortiIsolator
FortiDeceptor
FortiEDR

Version Updates

Date Version Detail
2024-03-27 92.02844
2024-03-27 92.02842
2024-03-27 92.02831
2024-03-27 92.02824
2024-03-27 92.02821
2024-03-27 92.02820
2024-03-27 92.02816
2024-03-26 92.02815
2024-03-26 92.02812
2024-03-26 92.02811