tuxnotes Posted July 20, 2018 ID:1257836 Share Posted July 20, 2018 Hello, I'm using Reg Organizer and noticed that Malwarebytes started to mark it as potentially unwanted software. Please remove Reg Organizer from your virus base as soon as possible, as this is a trusted software, which is developed since 2001 and has nothing with malware. See the VirusTotal report: Only Malwarebytes displays Reg Organizer as threat: https://www.virustotal.com/#/file-analysis/NTg5ZDNjM2NiOTYzNjc1YjM0ZTMyNDg4ZjY0MzBjYTI6MTUzMjEyOTQxMw== and:https://www.virustotal.com/ru/file/ba64e65e95947250b48f01098574d81ea9d9c9e60ae29783c780ff1eddd3b4f9/analysis/1532128622/ Link to post Share on other sites More sharing options...
Bronan Posted July 21, 2018 ID:1257946 Share Posted July 21, 2018 Hello, Equal situation even for me. Please revert asap Thanks in advance Bronan Link to post Share on other sites More sharing options...
mgonzales Posted July 21, 2018 ID:1257959 Share Posted July 21, 2018 (edited) Actually... I would like someone at MalwareBytes to double check if this is a FP or not (the reason for it being added... you should know this info correct?.. I mean things don't just magically get added for no reason I **HOPE** right?) I did notice at VT link: https://www.virustotal.com/en/file/220b441f09f2bb7f0425a00b1a3b511aface2cd8f2d4b02915d39e062f8ea8c3/analysis/1532121564/ if you click the "Relationships" tab and follow the link Execution parents This file was created during the sandboxed execution of the following files. 22d8e2fcf312cd2ade1b0e7b3675445b70377ffc5492672f2d54825399c18b42 Which takes you to this report: https://www.virustotal.com/en/file/22d8e2fcf312cd2ade1b0e7b3675445b70377ffc5492672f2d54825399c18b42/analysis/ File name: RegOrganizer.exe Detection ratio: 54 / 63 Analysis date: 2018-07-02 06:05:59 UTC ( 2 weeks, 5 days ago ) Edited July 21, 2018 by mgonzales Link to post Share on other sites More sharing options...
mgonzales Posted July 21, 2018 ID:1257960 Share Posted July 21, 2018 If this app and others by the same company are malware vectors please keep flagging them - eagerly awaiting reply / clarification so I know if I should remove or not. The report on the relationship link that has a 54/63 - has many detections of W32/Neshta.A curious that on that report MalwareBytes say clean / ok while 54 others do not concur. Link to post Share on other sites More sharing options...
Bronan Posted July 21, 2018 ID:1258067 Share Posted July 21, 2018 Installed Reg Organizer 8.16 when Malwatebytes was quiet. Imidiatelly after restarting Malwarebytes 3.5.1 Premium, Re Org was blocked as PUP and I was unable to do Exclusions, that means point to the "FOLDER" in programe files, Program Data (If Any) and Application Data/Application Roaming . All this situation become very frustrating Link to post Share on other sites More sharing options...
Staff screen317 Posted July 21, 2018 Staff ID:1258068 Share Posted July 21, 2018 (edited) Hello, This program is detected as PUP.Optional (or "Potentially Unwanted Program") because it displayed certain criteria that we describe as potentially unwanted. See here for more: https://www.malwarebytes.com/pup/ If you want to keep the program, please have MBAM ignore these detections (uncheck them when you see them, and click "Ignore Always" when prompted), and add the folders to MBAM's exclusion list. If you represent the company and would like the program re-evaluated, please contact pup@malwarebytes.com from a company email address. All correspondence will proceed through there. Best regards, Edited July 22, 2018 by screen317 Link to post Share on other sites More sharing options...
Chemtable Posted July 22, 2018 ID:1258075 Share Posted July 22, 2018 Hello, The authors of Reg Organizer had contacted you regarding the reevaluation. Link to post Share on other sites More sharing options...
Staff blender Posted July 23, 2018 Staff ID:1258209 Share Posted July 23, 2018 Hello, @ChemtableSomeone will reply to your email if you have one. @ Everyone else in this thread.. Detection for this will be removed in the next database update. Thank you for reporting the issue. I'll re-lock the thread to prevent more replies. Link to post Share on other sites More sharing options...
Recommended Posts