Reference Guide

Navigate the Dell Server
44
The file has been identified as a Potentially Unwanted Program. This indicates that the program may be
unwanted, despite the possibility that users consented to download it. Some PUPs may be permitted to
run on a limited set of systems in your organization (EX. A VNC application allowed to run on domain
administrator devices). A Dell Server administrator can choose to waive or block PUPs on a per device
basis or globally quarantine or safelist based on company policies. Depending on how much analysis
can be performed against a PUP, further subclassification may be possible. Those subclasses are
shown below and will aid an administrator in determining whether a particular PUP should be blocked or
allowed to run:
Subclass
Definition
Examples
Adware
Technologies that provide annoying advertisements
(example: pop-ups) or provide bundled third-party add-ons
when installing an application. This usually occurs without
adequate notification to the user about the nature or
presence of the add-on, con
trol over installation, control over
use, or the ability to fully uninstall the add-on.
Gator,
Adware Info
Corrupt
Any executable that is malformed and unable to run.
Game
Technologies that create an interactive environment with
which a player can play.
Steam
Games,
League of
Legends
Generic
Any PUP that does not fit into an existing category.
HackingTool Technologies that are designed to assist hacking attempts.
Cobalt Strike,
MetaSp0it
Portable
Application
Program designed to run on a computer independently,
without needing installation.
Turbo
Scripting
Tool
Any script that can run as if it were an executable.
AutoIT,
py2exe
Toolbar
Technologies that place additional buttons or input fields on-
screen.
Nasdaq
Toolbar,
Bring Me
Sports
Score
A Score is assigned to each file. Negative scores, from -1 to -100 denote files that are deemed
Abnormal or Unsafe. The score represents the confidence level that the file is malware. The higher the
negative number, the greater the confidence.
File Type
The file is assigned a type, based on the score.
File Types:
 Unsafe: A file with a score ranging from -60 to -100. An Unsafe file is one in which the Advanced
Threat Prevention agent finds attributes that greatly resemble malware.
 Abnormal: A file with a score ranging from -1 to -59. An Abnormal file has a few malware attributes
but fewer than an unsafe file, thus is less likely to be malware.