APlusMaint Posted September 4, 2010 ID:309021 Share Posted September 4, 2010 My installer for my Preventive Maintenance program is being flagged and quarantined (Rogue.Installer).It is not a virus or malware in any way. It is used to help keep systems clean and maintained. Last year a couple of my programs files were being falsely flagged by Malwarebytes but I contacted you guys and you fixed it right away. I tried to email you sometime in the last couple weeks but got no response and it is still being flagged. My program defaults installing in the Program Files directory in a folder called "APlusMaint". APlusMaint.exe is the main file Scheduler\CMScheduler.exe is the Schedualing Service and APScdHst.exe is the User Scheduler.The latest version can be downloaded at:http://APlusMaint.net/software/APlus-Maint.phpHopefully it will be fixed soon.Thanks,Chris Link to post Share on other sites More sharing options...
Staff shadowwar Posted September 4, 2010 Staff ID:309024 Share Posted September 4, 2010 This is not detected installer wise with the latest def set. Can you please follow the instructions here and post a mbam dev log?http://forums.malwarebytes.org/index.php?showtopic=3228 Link to post Share on other sites More sharing options...
APlusMaint Posted September 10, 2010 Author ID:312000 Share Posted September 10, 2010 Sorry for the late reply. I finally got to a computer with the false positive. I went ahead and restored all instances on this computer from quarantine and performed the mbam /developer scan.It found 5 false positives of different versions of my program.I zipped the log up and am attaching it here.Hopefully this will be fixed in your next update? Chrismbam_log_2010_09_10__08_45_01_.zip Link to post Share on other sites More sharing options...
APlusMaint Posted September 10, 2010 Author ID:312001 Share Posted September 10, 2010 For some reason when I download the zip file from your site it seems corrupt... so I'll upload the log as a txt as well...mbam_log_2010_09_10__08_45_01_.txt Link to post Share on other sites More sharing options...
nosirrah Posted September 10, 2010 ID:312047 Share Posted September 10, 2010 This should be fixed. Link to post Share on other sites More sharing options...
APlusMaint Posted September 10, 2010 Author ID:312099 Share Posted September 10, 2010 Thank You! It will be nice to no longer see it flagged. Link to post Share on other sites More sharing options...
APlusMaint Posted September 10, 2010 Author ID:312108 Share Posted September 10, 2010 This should be fixed.Not sure if the update with it fixed is out just yet... but I just tried it again and got the same flagged files. Link to post Share on other sites More sharing options...
nosirrah Posted September 10, 2010 ID:312130 Share Posted September 10, 2010 Did you update? In 4590 it was detected but in 4591 it was not. I know because I fixed it myself.I downloaded the file you posted at this link :http://aplusmaint.net/software/APlus-Maint.phpI just double checked and this is confirmed to be no longer detected. Link to post Share on other sites More sharing options...
APlusMaint Posted September 10, 2010 Author ID:312143 Share Posted September 10, 2010 That is the latest file but the 5 files listed in that log above were still flagged. Does that mean any new versions of the file will be flagged? Link to post Share on other sites More sharing options...
nosirrah Posted September 10, 2010 ID:312145 Share Posted September 10, 2010 Please check private message. Link to post Share on other sites More sharing options...
APlusMaint Posted March 3, 2011 Author ID:395451 Share Posted March 3, 2011 Thanks for your help in resolving this issue.I don't think I have an issue with false positives from the APlusMaint program anymore. But I have been in the process of changing the name of the program for a secondary company and since the name has changed Malwarebytes is now thinking it is some sort of infection. Files Infected:c:\program files (x86)\Techware\scheduler\TWHost.exe (Trojan.Clicker) -> Quarantined and deleted successfully.c:\program files (x86)\Techware\techware.exe (Trojan.Clicker) -> Quarantined and deleted successfully.c:\program files (x86)\Techware\scheduler\TWServ.exe (Trojan.Clicker) -> Quarantined and deleted successfully.Here is some Virus Total Links to the 3 files that are flagged:techware.exe: http://www.virustotal.com/file-scan/report.html?id=af23a9ef25ae19198890418ebc438dced2a4f364cd6e2be83c82ae2824f4cd9c-1299117841TWHost.exe: http://www.virustotal.com/file-scan/report.html?id=fdf2eee9227d00aada1c0cdf0aba8ce520a14d20686f4ef25dc30d187c02252f-1299117944TWServ.exe: http://www.virustotal.com/file-scan/report.html?id=a587d88a88dfb8d7c97e49f266736a609c3350441a2e8d016e6b27baea685667-1299118045These files are practically identical to the APlusMaint program aside from the name change and some minor differences as of now.The Techware program will be marketed as a "Virtual Technician" which will automate and utalize all of the greatest utilities technicians use to maintain PCs.Thanks for your help! Please let me know anything else you may need from me to help get this issue resolved quickly. If it helps the latest version will be available here:http://ITtechware.com/software/ITtechware.exeChris Link to post Share on other sites More sharing options...
nosirrah Posted March 3, 2011 ID:395537 Share Posted March 3, 2011 This was likely fixed yesterday, can you please confirm? Link to post Share on other sites More sharing options...
APlusMaint Posted March 5, 2011 Author ID:396279 Share Posted March 5, 2011 Looks like it is fixed now. Thanks!Chris Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now