iamauser Posted June 28, 2015 ID:972480 Share Posted June 28, 2015 I downloaded Cheat Engine 6.4 setup and MBAM quarantine it, false positive? Link to post Share on other sites More sharing options...
Staff blender Posted June 28, 2015 Staff ID:972490 Share Posted June 28, 2015 Hello, Can you post the MBAM log & the file (zipped) detected please?Instructions here if needed..https://forums.malwarebytes.org/index.php?/topic/3228-please-read-before-reporting-a-false-positive/ Thanks! Link to post Share on other sites More sharing options...
iamauser Posted June 28, 2015 Author ID:972525 Share Posted June 28, 2015 Hello and thank for reply. Here is the log. Link to post Share on other sites More sharing options...
iamauser Posted June 28, 2015 Author ID:972526 Share Posted June 28, 2015 Whoops, sorry I forget to attach the detected file. Link to post Share on other sites More sharing options...
pal1000 Posted June 28, 2015 ID:972533 Share Posted June 28, 2015 On the download page of Cheat Engine there is also a portable install-less version. You'll find it if you read further down below the huge download link. It's no surprise it thrown alarm bells considering it is a bundled installer. Link to post Share on other sites More sharing options...
Staff blender Posted June 28, 2015 Staff ID:972613 Share Posted June 28, 2015 Thanks for the log/file.What download page are you referring to? Link to post Share on other sites More sharing options...
Staff blender Posted June 28, 2015 Staff ID:972614 Share Posted June 28, 2015 This is not a false positive..It is an OpenCandy installer which we do detect. Other vendors also detect it.https://www.virustotal.com/en/file/4873498fbde0c4f95eb5392a4921c4734ddd2e81e30eb2fb76ce7ed326d1d669/analysis/1435517319/ PUP means "Potentially Unwanted Program" and is not "malware". OpenCandy is a known distributor of bundleware.Most of the time when users download OpenCandy installers, they end up with multiple other programs installed and don't know where they came from.These other programs are usually trialware & often use aggressive methods to try getting the user to buy them. (such as popups from a PC cleanup program showing massive numbers of issues and user needs to buy the program to "fix" said issues.) Here in the license agreement, the installer tells you it is going to recommend other 3rd party software: Here, they have a recommendation for me to install a Tuneup utility. Notice it is prechecked to install. If I was not a savvy user, I may not know enough to checkmark custom install instead so I can choose not to install the other stuff. An info link on how we decide if something is a PUP or not..https://www.malwarebytes.org/pup/ If you want to use it, you will need to add it to your MBAM exclusions. Open MBAM> settings> malware exclusions> add file.You can add it there. Hope that helps to understand why we detect such software. Link to post Share on other sites More sharing options...
iamauser Posted June 29, 2015 Author ID:972667 Share Posted June 29, 2015 Thank you. I am going to install cheat engine only. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now