PASnap.exe a PUP?

Viruses and worms
1

I ran a full scan in my computer,with the “Scan PUP” on. As it appeared, it detected an infected file on C:\Windows\System32\DriverStore\FileRepository\pac7302.inf_amd64_neutral_08cf6071e8bb30d1\PASnap.exe.
Apparently, PASnap.exe is a system file and I am reluctant at moving it to the chest, so I wanted to make sure if this is really some PUP/Virus or something, or just some false alarm?

2

PUP is not virus…but a warning that you have a program that can be used for good or bad depending on what it is for and who installed it

PUP (potentially unwanted program)
http://searchsecurity.techtarget.com/definition/PUP

Pasnap.exe

Pasnap.exe with description Snapshot Reader is a process file from company PixArt Imaging Incorporation belonging to product Snapshot Reader. The file is digitally signed from Microsoft Windows Hardware Compatibility Publisher - VeriSign Time Stamping Services Signer We do not recommend removing digitally signed files from Microsoft Windows Hardware Compatibility Publisher

Is this something you know ?

3

upload suspicious file(s) to www.virustotal.com and test with 43 malware scanners
when you have the result, copy the url in the address bar and post it here for us to see

alternative
Jotti http://virusscan.jotti.org/en
VirSCAN http://virscan.org/
Metascan http://www.metascan-online.com/

4

This is what I got from VirusTotal: http://www.virustotal.com/file-scan/report.html?id=d243d2cf5a8ffaf15fd0d2c8189a564c8dd13a283a4eb129d3370954c4aabb90-1320163999
Jotti: http://virusscan.jotti.org/en/scanresult/ac8c9b6b5dd5e2a38b9a202343ed193a48c3912c/aede1c4df0d6f0e51b17b395cec1c3a30873763f
MetaScan: http://www.metascan-online.com/results.cgi?uid=lk4itu7l7vdnekk5z4zps3oxsuh53dtf
And VirScan: http://r.virscan.org/44c1d57aa0d3d5c70eb288378776ba5d

Basically, only Avast says it’s a PUP.

5

So also consider this info: http://www.online-armor.com/oasis2/file/microsoft/unspecified_product/pasnap_exe/95366
and here: http://www.freefixer.com/library/file/42871/
and here: http://www.runscanner.net/lib/PASnap.exe.html
and: http://windowfin.com/bbs/board.php?bo_table=windowfin&wr_id=9932&page=56

polonus

6

First seen: 2009-08-11 17:14:56
Last seen : 2011-11-01 16:13:19

sigcheck:
publisher…: PixArt Imaging Incorporation
copyright…: Copyright (c) 1998-2007 PixArt Imaging Incorporation. All rights reserved.
product…: Snapshot Reader
description…: Snapshot Reader
original name: Snapshot Reader.exe
internal name: Snapshot Reader
file version.: 0005.0016.2007.0808
comments…: n/a
signers…: -
signing date.: -
verified…: Unsigned

7

Okay, thanks for everything. I think I won’t move it to the chest then.

8

Hi All,

Recently i did a full scan on my system and avast warned pasnap.exe as a virus. so without having a second thought i allowed awast to delete the file.

May i know how i can get this file back?

is pasnap.exe really a threat to the computer?

thanks in advance.

ramesh

9

Hi rameshguptha,

It is a snapshot reader driver. Read here: http://www.freefixer.com/library/file/42871/
It was developed in Taiwan, China by PXI.
You could have downloaded it from here:
-http://www.filestube.com/e1b4c0c0870c94e903e9,g/Socpccameradrivermonitor-pasnap.html
but there was HTML/Infected.WebPage.Gen issue there reported,
Best is to get it from here: http://driver-backup.com/driver_detail/?driver_id=98673

polonus

10
.....so without having a second thought i allowed awast to delete the file

Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm