F/P PUP detection on Dell "bloatware"

[daledoc1]

Hi:

 

I'm sure these are F/Ps, as these programs were OEM on this box years ago.

IOW this is a new detection on "old" programs.

 

I presume you can fix this without the actual files?

If not, let me know.

(We are under a tornado warning here, so I might have to go offline soon.)

 

Cheers,

Dell-FP-11042015.txt

[blender]

Hello,

 

Thank you for the report.

We really do need the files in order to not only see why these items triggered a false positive but also to help prevent these false positives in the future.

One of the files should be fine.. let's go for this one:

C:\Program Files\Dell Support Center\Setup_nltd.exe

 

Thanks!

[daledoc1]

Here you go.

 

Thanks!

Setup_nltd.zip

[blender]

Thanks!

 

This will be fixed next database update.

 

Stay safe in the rough weather!

[daledoc1]

Thanks very much for speedy reply.

 

Cheers,

[daledoc1]

Just rescanned with 06.01 -- all good.

 

Thanks very much for quick fix!

[blender]

Thank you for the update & for reporting!

[whatmeworry?]

Hi, daledoc1.  Thanks very much for posting this FP issue.  I ran a scan yesterday and got the same PUP results as you did.  I came to the forum to see whether it had been reported but somehow didn't see your message.  Fortunately I was very busy with other things and so did nothing, figuring I'd report it the next day along with a developer file, etc.  Well, I ran a scan today with database version 2015.11.07.03, and it came up clean.  So I came back to the forum to see whether there had been any mention of the FP and found your posting.  I'm much relieved.

 

The only thing I'm not relieved about is that I see from the results file you posted that MBAM scans about 10 K more files on your system than on mine, and it does so in HALF the time it takes on mine!  Perhaps it's time for me to start thinking about a replacement for my 4½-year-old Dell.  Sigh.

 

 

[daledoc1]

Hi, WMW:

 

I'm glad you were able to resolve your issue.

 

I'm curious, though, as to why your scan 1 day ago showed the F/P detection on the Dell files.

 

Your sig block says you are running MBAM Pro (which is now called "Premium", btw).

So, I might expect you have MBAM configured for automatic, scheduled update checks.

The reason I ask is that this F/P was fixed *2* days ago.

You mentioned that your scan with the F/P detection was yesterday, 1 day after the F/P had already been fixed.

 

>>So, it doesn't make much sense that you would have seen the F/P detection yesterday, if the F/P had already been fixed 2 days ago.

>>This suggests that either your MBAM Premium might not be configured correctly for update checks, or it's not updating properly, or something else might be amiss.

 

Are your scheduler settings for MBAM Premium correct (e.g. automated, scheduled update checks every hour or every few hours)????

If they were, I might have expected that your scan yesterday would have the current database, which should have already fixed the F/P and no Dell PUP detection.

If you ran a *manual* scan yesterday, then MBAM would have checked for the current database before scanning -- so, in the same way, you ought to have had the current database even for a manual scan yesterday and no Dell PUP detection.

 

BTW, your hardware seems plenty robust.

So, if your scans are taking a very long time, I suggest starting a new post in the MBAM Help Section HERE.

You could post some diagnostic logs to help determine what's going on (there are MANY MANY factors that determine scan times).

It might be a good idea, especially if MBAM Premium is not updating properly (which is a more serious issue).

 

It's up to you, though.

 

Thanks,

 

P.S. This is not the correct forum for troubleshooting. So, I suggest taking the discussion to the other sub-forum, if you are having problems.

[whatmeworry?]

Hi daledoc1.  Thanks very much for your response.  I've been immensely busy these last few days, so busy in fact that I thought the PUPs had been detected on the 6th, whereas I see now from my files that they were detected on the 5th.  And yes, I do have MBAM set to check for updates automatically each day, and it does.  I've stopped having it automatically run a scan each day, since no matter when I set it to do so, it invariably wound up doing so at an inconvenient time.  So now I just manually ask for a scan most days at a time that suits me on that day.

 

So, I don't think that I've got a problem with MBAM not updating correctly.  The main problem is with my unreliable brain.    Since I'm still far busier than I'd like, and since MBAM is updating correctly, I think I'll not delve further right now into why MBAM is taking so much longer to scan on my computer than on yours.  I'll keep your suggestion in mind for the future, however.

 

Again, many thanks!

[daledoc1]

And yes, I do have MBAM set to check for updates automatically each day, and it does.

MBAM databases are released, on average, 10 or so times per day, to stay abreast of zero-hour threats.

That's why the default setting for update checks is hourly.

Updating only once daily will leave you less protected.

 

I've stopped having it automatically run a scan each day, since no matter when I set it to do so, it invariably wound up doing so at an inconvenient time.

That is an issue with your settings that could be easily rectified.

 

So now I just manually ask for a scan most days at a time that suits me on that day.

With MBAM Premium, the scheduled scan task can be configured to run automatically and "silently" with no interaction from you.

Unless something is detected, you won't even know it's running (but you can check in the history to confirm that it did).

IOW there is generally no need to run manual scans with MBAM Premium.

 

Since I'm still far busier than I'd like, and since MBAM is updating correctly, I think I'll not delve further right now into why MBAM is taking so much longer to scan on my computer than on yours.  I'll keep your suggestion in mind for the future, however.

 

Again, many thanks!

Well, it's up to you.

If you post in the other forum area, we can help you with your settings (update checks, scheduled scans, etc.).

But if you are happy with it "as is", that's more than fine.

Cheers,

[whatmeworry?]

Hi daledoc1.  Thanks very much for your response.  Yes, I've got MBAM set to check for updates hourly.  As for scans, I'd rather not have the scan occurring when I'm doing other things on the computer.  In the past, at any rate, I've noticed the difference.  I'm more comfortable just having the scan run when I know I won't be using the computer for other things.

 

And yes, I think given how busy I am right now, I think I'd prefer not to send a message to the other forum.  But I definitely do appreciate your suggestion.

[blender]

Going to go ahead & close this thread since the false positive issue has been resolved.

 

If anyone needs any assistance with MBAM settings or issues, please start a new topic in this forum:

https://forums.malwarebytes.org/index.php?/forum/41-malwarebytes-anti-malware-help/

 

Thanks!