Jump to content

False Positive - Mac Space Reviver


AshishParihar
 Share

Recommended Posts

Hi Malwarebytes Team,

 

This is regarding the false detection of Mac Space Reviver by Malwarebytes Anti-Malware.

Mac Space Reviver is a genuine app for Mac, lets you scan and clean all the duplicate files including photos, music, videos & a lot more on Mac. This app does not modify any existing system settings, nor does it inject ads or hijack browsers. It is not involved in any kind of malicious activities. Our company is not only losing millions of users but our reputation and web traffic is also getting affected because of this  detection. We have suffered tremendous financial loss due to this. Please have this detection removed ASAP.

Details of the product are as follows:

File Name: msr_msite.pkg

Download URL:  http://cdn.macspacereviver.com/msr/builds/msr_msite.pkg

 

Regards,
Ashish Parihar

Link to post
Share on other sites

  • Staff

This actually is not a false positive. Based on behaviors we have seen from PCVARK/Techyutils products, we consider them to be PUPs (potentially unwanted programs).

To be more specific about what we've seen, see the following for details on the most egregious violation, which involves a program that we consider to be malware:

https://blog.malwarebytes.com/threat-analysis/2016/08/pcvark-plays-dirty/

Since we have seen malware bundled with a PCVARK app and signed with a PCVARK/Techyutils certificate, we are actually inclined to treat all such products as PUPs.

Link to post
Share on other sites

Hi Thomas,

I was not expecting this kind of answer by Malwarebytes Moderators. considering all the PCVARK products as PUPs (potentially unwanted programs) is not a right decision.

Mac Space Reviver doesn't do anything wrong with the users machine. its a simple application to clean duplicates.

I am still looking for a Product specific Review.

 

Regards,

Ashish Parihar

Link to post
Share on other sites

  • Staff

Ashish,

Do you have an explanation for why we found what we consider to be malware, signed with a Techyutils certificate, being installed by an Advanced Mac Cleaner installer? Keeping in mind that we've found evidence showing that Techyutils and PCVARK are the same entity?

Or why we frequently see things like fake Adobe Flash Player installers that install your products? (See the screenshots below of two different examples, one from June and one from July.)

These reasons are more than enough to qualify under our PUP criteria:

https://www.malwarebytes.com/pup/

Screen Shot 2016-07-26 at 9.37.12 AM.png

Screen Shot 2016-06-01 at 9.37.15 PM.png

Link to post
Share on other sites

Thomas,

I am here for Mac Space Reviver only.

Why you are not talking about Mac Space Reviver and its behavior on users machine ? if there are reasons for Mac Space Reviver to qualify under PUP criteria, please let me know those reasons. PUP does not mean potentially unwanted company. its a application specific criteria.

Regards,

Ashish

 

Link to post
Share on other sites

  • Staff

We will not be changing our detections of PCVARK/Techyutils products at this point. Your company is guilty of distributing what we consider to be actual malware. We believe that it is our customers' right to know that programs from a company distributing malware are probably not trustworthy.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.