What is UNP CampaignManager and how did it get on my computer? Under C:/Program Files and it appeared 7/7/2017 4:24 pm. I can not find any information at all, other it is Microsofts

No, I am on my laptop at home. I see that  a few more people have noticed this unknown Microsoft file on their computer.

Not happy about a sneaky file from Microsoft on my laptop, how do I remove it

I don't think this is anything to do with Microsoft.

If it is any help, here are excerpts from mine. I have windows 10, home use, not connected to a domain that I am aware of, but have problems with spammers.

This is from the .xml file that is part of the UNP, campaign manager file.  Copy and paste is not working for the rest .  Several files end  in .json.

  <?xml version="1.0" encoding="UTF-16"?>
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <URI>\Microsoft\Windows\UNP\RunCampaignManager</URI>
    <SecurityDescriptor>D:P(A;;GA;;;SY)(A;;FRFX;;;LS)(A;;FRFX;;;BA)(A;;FRFX;;;AU)</SecurityDescriptor>
  </RegistrationInfo>
  <Triggers>
    <CalendarTrigger>
      <StartBoundary>2016-06-02T10:30:00</StartBoundary>
      <ScheduleByDay>
        <DaysInterval>1</DaysInterval>
      </ScheduleByDay>
      <RandomDelay>PT6H</RandomDelay>
    </CalendarTrigger>
    <RegistrationTrigger>
      <Enabled>true</Enabled>
      <Delay>PT1M</Delay>
    </RegistrationTrigger>
  </Triggers>
  <Principals>
    <Principal id="Author">
      <UserId>S-1-5-18</UserId>
      <RunLevel>HighestAvailable</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>true</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>true</RunOnlyIfNetworkAvailable>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions Context="Author">
    <Exec>
      <Command>%windir%\System32\UNP\UNPCampaignManager.exe</Command>
    </Exec>
  </Actions>
</Task>

So I went ahead and deleted the file. There is no reason a program file should be in this area and looking at some of the files they were in all kinds of languages. Very strange.

The next day I logged on and guess what, the files were back. How in the world?? So I am deleting them again.

Interesting that no one seems to know anything about them, where they came from, what they do, or if they are safe. They do not show up on any scan or malware run. Using Norton and they know nothing about it.

Microsoft says they are not theirs, hmm, is a file:

{"ACTIVECAMPAIGNS":[{"ConfigLocation":"https://settings-win.data.microsoft.com/settings/v2.0/wsd/upx","ID":"{91be532c-f9f1-406a-9858-43697c6f437a}","Name":"PrivacySettingsRS2"}],"GLOBALSHUTOFF":"No","REVISION":"2"}

Also contains .etl files

ETL files are log files that have been created by the Microsoft Tracelog software application. This Microsoft program creates event logs in the binary file format. These logs are created from the kernel in a Microsoft operating system.

The ETL logs can contain information about disk access and page faults, logging high-frequency events and recording the performance of the Microsoft operating system. This information can be used to analyze and adjust voice response software applications.

The .etl file extension is also used by the Eclipse open development platform. The files created by the platform are saved with the .etl file extension.

So Microsoft, what's up?

Hi David,

We know of UNP CampaignManager being related to PCs connected to a domain but in this case, since you are using a home PC, we may need to further investigate regarding your concern.

We suggest performing a disk cleanup, and check if the file will still remain. If the file remains after a disk cleanup, it is most likely related to a program on your PC. Steps can be found in this support article on disk cleanup in Windows 10.

Let us know how it turns out.

Patricia, nothing personal but I have been using computers or a long time, probably longer than you are old. So I know about the maintenance routines that Microsoft has and have run everything I know of to keep my laptop running smoothly. With Microsoft as of late, that is a challenge by itself.

OK,  I deleted the UNP file, emptied the recycle bin, ran the clean-up program for both files and system, then downloaded the latest malware finder from Microsoft and ran a full scan.

Now that I have a clean disk, no malware was found, rebooted, I opened explorer and looked at C:/Program Files

It's back, like it just started today.

It sure looks like spyware, I could care less if you watch what I browse, but I do not like it on my computer, there is no reason for it. I can read the JSON file, what is this? 

{"ACTIVECAMPAIGNS":[{"ConfigLocation":"https://settings-win.data.microsoft.com/settings/v2.0/wsd/upx","ID":"{91be532c-f9f1-406a-9858-43697c6f437a}","Name":"PrivacySettingsRS2"}],"GLOBALSHUTOFF":"No","REVISION":"2"}

I can not open the ETL file to see what's in it.

Here is a pretty picture of my files.   Next.

Unfortunately, it can't be remove. You can disable it though based on a Microsoft support post through registry.

https://answers.microsoft.com/en-us/windows/forum/windows_10-security/unp-campaignmanager/231f2a85-4dbc-4f1b-897c-4c6ab7f5314f

Unfortunately, it can't be remove. You can disable it though based on a Microsoft support post through registry.

https://answers.microsoft.com/en-us/windows/forum/windows_10-security/unp-campaignmanager/231f2a85-4dbc-4f1b-897c-4c6ab7f5314f

 This the most irresponsible course of action to ever give a home computer user. I am very good with computers but I also know enough to stay out of the registry at all costs. Working in the registry is best left to professionals such as engineers at Microsoft.

The thread you sent says the same thing I just said, and I quote:

John6528 asked on June 12, 2017  

Question Q: unp campaignmanager?

This appeared a week ago or so. It is not in program listings. What is it?

John

--                                                                                                 

Jefferson Ore replied on  June 12, 2017

Microsoft

Hi John,

There are a few reasons why you are seeing this notification on your desktop. To better assist you, we need the answer to the following questions:

• Which Windows version are you using?
• Did you recently install an update?
• What was the exact message you received?

We are looking forward to your response.

                                                                                 

John6528replied on  June 13, 2017   

reply to Jefferson Ore's post on June 12, 2017 

Windows 10

I didn't get a message. I discovered it in /programs and noticed it wasn't on the installed programs list when I went to uninstall it. That seemed curious.

It arrived 6/6. "Widows privacy and security" installed 5/31. I dodn't remember any other updates around that time.

John

---

JO

Jefferson Ore replied on  June 14, 2017

Microsoft

In reply to John6528's post on June 13, 2017                

The Universal Notification Platform or UNP usually applies to computers on a domain, a good example is a work computer. There are several ways to hide or remove this notification from appearing on your desktop. However, since the steps will guide you to make changes with your registry files, we suggest that you create a back up of your registry by following the steps on this link.

Once your ready, click on this article for further assistance with your UNP Campaign Manager issue.

If you have additional questions, please let us know.

 GDeac  replied on  August 13, 2017

Reply In reply to Jefferson Ore's post on June 14, 2017 

 Create a restore point is straightforward to average users but. How would anyone that is not an expert be able to find this UNP registry in Regedit. Needle in a hay stack! A little more help please. I'm sure the export part will be easy once you know what to back up!

If this is the type of service Microsoft is giving, I want no part of it. I have witnessed the demise of Microsoft for a number of years now and if the situation does not improve, I highly doubt Microsoft will stay in business much longer.

Bottom line,

1. My original question was not answered

2. No viable solution was given

3. Microsoft recommended I go to regedit and attempt to fix the registry, (poor advice at best)

4. Microsoft would not even admit this software was theirs at first,

5. Can't be removed, but can disable it???

6. What is Microsoft hiding?

I am not sure I want to stay a customer with Microsoft, Windows 10 has been a terrible experience.

hi same here and my computor is not on domain , this is a spy that cant be found

or eliminate with any cleaner that microsoft is talking about so this is BS as usual .

They sneek up on you and install there spyware when ever they want . So yes went into registry and found the sucker but it was back the next day . I am so piss off i'll delete win 10 asap . Shame on on microhard !!

Here is my attempt to at least Deny Access to System!! (In Programme Files)

Through Properties, and Edit, then tick Deny All Acess. I don't know what this thing is or does or if this will help stop it.

But at least my PC let me do this. Some Folders you aren't allowed to change permissions at all.

Boy W10 is a nasty piece of work!!