*ATTENTION* Puu.sh users.

[GeorgeGFX]

The issue seems to be solved, for those who updated to R94 version which is the infected one, make sure to update puu.sh to R100 version which would clean your PC if you still have the virus file.

For those who haven't updated yet (virus version), it is recommended to re-install puu.sh as you might still get the virus once you update to R94 & R100.

[Juriën]

Fortunately the developers themselves have been manually removing the threat. If you got the confirmation message as well as the r100 update, it's more than likely the job was already done. However, I suppose a double check is in order for skeptics.

It is still heavily advised to change any important stored passwords or any that have been used since the r94 update just in case the malware was collecting any locally stored passwords.

I have the R100 update and the file was removed by itself (I guess) as I never found it nor did I know I had it.
It was gone when george message'd me about this thread.

Update R100 is safe.

[Striker]

Virustotal scan result: https://www.virustotal.com/ar/file/0...51a7/analysis/

[Juriën]

Virustotal scan result: https://www.virustotal.com/ar/file/0...51a7/analysis/

That didn't make much sense, as we are not talking about the actual puush.exe
try scanning fgunz launcher, you'll come up with some false positives too.

We're talking about puush.daemon.exe, which can be found at %appdata/puush/puush.daemon.exe

[GeorgeGFX]

Virustotal scan result: https://www.virustotal.com/ar/file/0...51a7/analysis/

It's not the puu.sh itself being infected, don't watch what people say on twitter.
It was about the puush.daemon.exe in the %appdata% location.

If anyone needs help on how to remove the virus, PM me, I'm locking the thread as puu.sh already released new update that automatically removes the virus.

[GeorgeGFX]

Bump, seems like two 'puush.daemon.exe' have been sent after the update.
Make sure you also checked the puush folder, by default for me is;
C:\Program Files (x86)\puush

If you have another file named 'puush.daemon.exe' delete it immediately.