Bysen Posted November 19, 2017 ID:1184269 Share Posted November 19, 2017 Hello. On the site en.savefrom.net which is used to download Youtube videos, they have a small app that can be installed in all browsers so that you don't have to visit their site. The name of the app is SFHelper-Setup. The site is: http://en.savefrom.net/1-how-to-download-youtube-video/ When I scanned the exe with Malwarebytes, it detected a "PUP.Optional.OpenCandy" in it. I scanned it with Virus Total and it had a zero detection rate. Then I thought that I would unzip the installer and remove whatever file contained the PUP. I used 7zip to extract the contents of the exe, and then scanned that folder (containing the extracted files) with Malwarebytes. This time, no PUP was detected. I tried this many times. If Malwarebytes detects a PUP in the exe file, how come the scan of the extracted contents comes clean? Link to post Share on other sites More sharing options...
Staff miekiemoes Posted November 19, 2017 Staff ID:1184291 Share Posted November 19, 2017 Hi, This is a false positive indeed and will get fixed in next database update. Thanks for reporting! Link to post Share on other sites More sharing options...
Bysen Posted November 20, 2017 Author ID:1184484 Share Posted November 20, 2017 Link to post Share on other sites More sharing options...
Recommended Posts