What Is a PUP? Potentially Unwanted Programs Explained
What a PUP is
A PUP, or potentially unwanted program, is software that may not be strictly malicious but often creates behavior the user did not expect or want. Examples include bundled browser extensions, search toolbars, coupon apps, fake optimizers, driver updaters, download managers, and programs that change browser settings while hiding the real trade-off in installer screens.
The word “potentially” matters because some PUPs are technically installed with user consent. The problem is that consent may be buried behind preselected checkboxes, confusing wording, or a bundle that makes unrelated offers look like required components.
Some fake installers go beyond ordinary PUP bundling and move directly into malware delivery. A recent campaign used fake ChatGPT and Claude installer pages on GitHub and SourceForge to push a Deno-based RAT.
Common signs of a PUP
Your browser may start with a new homepage, show a different search provider, inject ads into pages, or install extensions you do not remember choosing. Windows may show new startup items, “system scan” warnings, update nags, or paid repair prompts. Some PUPs are merely annoying; others make the computer slower, collect browsing data, or expose users to scams and unsafe downloads.
How PUPs get installed
The most common path is bundling. A free installer offers the main program and adds optional tools unless the user chooses a custom setup and declines them. PUPs also arrive through fake update prompts, download portals, cracked software, browser extension stores, and ads that imitate system warnings.
A PUP can be removed like normal software when it behaves cleanly. However, some leave behind extensions, scheduled tasks, browser policies, or startup entries. If settings return after you change them, there is likely a second component still active.
Safe removal basics
Open installed apps and sort by date. Remove programs that appeared around the time the problem started, especially if the name is generic or the publisher is unfamiliar. Then check browser extensions and notification permissions. Resetting a browser can help, but it should come after removing the suspicious extension or app that changed the settings.
If manual cleanup does not hold, scan the device with trusted security software. A scanner is useful for leftover services, startup items, policies, and files that normal uninstallers miss. For browser-specific cleanup, start with the pop-up ads and browser notifications guide. For software comparisons, see our security software reviews.
FAQ
Is a PUP the same as a virus?
No. A PUP is often less destructive than a virus, but it can still degrade privacy, performance, and browser safety. Treat it as unwanted software and remove it if it was not clearly chosen.
Why did my antivirus allow it?
Security tools classify PUPs differently because some are distributed through legal installers. Many scanners have an option to detect potentially unwanted applications more aggressively.
How can I avoid PUPs?
Download software from official sources, avoid cracked installers, choose custom installation when available, decline optional offers, and review browser extension permissions before installing anything new.