PUP not detected by avast.

[system]

@davexnet post:18

how did a folder containing these files get into the temp folder?

Perhaps you’ll get a clue from here:

http://www.installmonetizer.net/faq.php

(Hmm, sounds somewhat like what avast! has been accused of lately by some.)

[DavidR]

@davexnet post:20

It’s Windows XP, so it uses the default temp folder, like so:
G:\Documents and Settings\Dave\Local Settings\temp

This was the location where the files were originally identified, not in an archive (7z,zip)
but regular files (.exe, .dll) in a sub folder.

The 7z file was created by myself in order to explore how/when avast! detected the bad file(s).
I did just about everything I could think of except actually run the exe.

Would a PUP be detected by the webshield, assuming this download was the result of some
java script from a web page?

Being in a Temp location could possibly mean that they were Temp Internet Files - C:\Documents and Settings\David\Local Settings\Temp\Temporary Internet Files - but why why there would be .exe or dll files in there is strange.

PUPs are scanned for by default in the web shield as far as I’m aware, but I’m also sure there are instances when they may not be scanned. Anything that downloaded on https (secure connection) or isn’t downloaded using an http connection and http protocol.