Jump to content
tuxnotes

FP on Reg Organizer

Recommended Posts

Hello,

I'm using Reg Organizer and noticed that Malwarebytes started to mark it as potentially unwanted software. Please remove Reg Organizer from your virus base as soon as possible, as this is a trusted software, which is developed since 2001 and has nothing with malware.

See the VirusTotal report: Only Malwarebytes displays Reg Organizer as threat: 

https://www.virustotal.com/#/file-analysis/NTg5ZDNjM2NiOTYzNjc1YjM0ZTMyNDg4ZjY0MzBjYTI6MTUzMjEyOTQxMw==
and:
https://www.virustotal.com/ru/file/ba64e65e95947250b48f01098574d81ea9d9c9e60ae29783c780ff1eddd3b4f9/analysis/1532128622/

Share this post


Link to post
Share on other sites

Actually...  I would like someone at MalwareBytes to double check if this is a FP or not (the reason for it being added... you should know this info correct?.. I mean things don't just magically get added for no reason I **HOPE** right?)

 

I did notice at VT link:

https://www.virustotal.com/en/file/220b441f09f2bb7f0425a00b1a3b511aface2cd8f2d4b02915d39e062f8ea8c3/analysis/1532121564/

if you click the "Relationships" tab and follow the link

Execution parents
This file was created during the sandboxed execution of the following files.
 
Which takes you to this report:
 
File name: RegOrganizer.exe
Detection ratio: 54 / 63
Analysis date: 2018-07-02 06:05:59 UTC ( 2 weeks, 5 days ago )
 
Edited by mgonzales

Share this post


Link to post
Share on other sites

If this app and others by the same company are malware vectors please keep flagging them - eagerly awaiting reply / clarification so I know if I should remove or not.

 

The report on the relationship link that has a 54/63 - has many detections of W32/Neshta.A curious that on that report MalwareBytes say clean / ok while 54 others do not concur.

Share this post


Link to post
Share on other sites

Installed Reg Organizer 8.16 when Malwatebytes was quiet.
Imidiatelly after restarting Malwarebytes 3.5.1 Premium, Re Org was blocked as PUP and I was unable to do Exclusions, that means point to the "FOLDER" in programe files, Program Data (If Any) and Application Data/Application Roaming .

All this situation become very frustrating

Share this post


Link to post
Share on other sites

Hello,

This program is detected as PUP.Optional (or "Potentially Unwanted Program") because it displayed certain criteria that we describe as potentially unwanted. See here for more: https://www.malwarebytes.com/pup/

If you want to keep the program, please have MBAM ignore these detections (uncheck them when you see them, and click "Ignore Always" when prompted), and add the folders to MBAM's exclusion list.

If you represent the company and would like the program re-evaluated, please contact pup@malwarebytes.com from a company email address. All correspondence will proceed through there.

Best regards,

Edited by screen317

Share this post


Link to post
Share on other sites

Hello,

@ChemtableSomeone will reply to your email if you have one. 
@ Everyone else in this thread..

Detection for this will be removed in the next database update. Thank you for reporting the issue.
I'll re-lock the thread to prevent more replies.

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.