Jump to content
Due to inclement weather in Southwest Florida, our Clearwater support team is offline. Our other offices are available to assist you, however their responses may be delayed. We appreciate your patience and understanding during this time. ×

False positive: Foxit Reader uninstaller


nemt
 Share

Recommended Posts

When updating software with Ninite earlier today Anti-Ransomware flagged the uninstaller for Foxit Reader as ransomware and placed it in quarantine. If you guys aren't familiar with Ninite it's an automated multi-app installer, it usually removes old versions before installing new ones, which explains why it triggered the Foxit uninstall exe file.

 

Please let me know if you need any other info, I've attached the files requested in the false positive instruction thread.

 

Thanks again for this great tool.

unins000.zip

Malwarebytes Anti-Ransomware.zip

logs.zip

Link to post
Share on other sites

https://www.virustotal.com/en/file/778002d529d4d0b3bfd35eafc4daf9c40cca2a1b7c823627c006a29f48697493/analysis/1457946525/

Hello nemt and :welcome:

Even though the well known Nanite service was involved, it's the uninstaller executable at the center of this.

It is uncertain that "White Listing" or entering in MBARW's Exclusions would be viable. But the MBARW development team needs to be aware of this. This is interesting...

C:\Program Files (x86)\Foxit Software\Foxit Reader\unins000.exe


Thank you for beta testing MBARW and this very valuable feedback nemt!

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.