False Positive: Serv-U

[kudasauce]

I've attached a log of before removal and after removal and other items.

Logs.zip

[shadowwar]

Can you please tell me what version you are running?

The latest direct download is not detected.

Also can you zip and attach this file?

c:\program files\SERV-U\servudaemon.exe

[kudasauce]

Can you please tell me what version you are running?

The latest direct download is not detected.

Also can you zip and attach this file?

c:\program files\SERV-U\servudaemon.exe

Version: Malwarebyte's Anti-Malware 1.51.1.1800

Attached is the .exe as "Program.zip"

Program.zip

[shadowwar]

This will be renamed to PUP.Servu in the next update.

PUP means potentially unwanted program as this is still used by malware in malicous ways sometimes.

Thanks for reporting

[jlampeATrhinosoft]

Serv-U was essentially rewritten in 2008 to take advantage of 64-bit computing, IPv6, modern web transfer paradigms, etc. You may want to double-check to see if your engine still detects the server or whether the PUP.Servu designation applies to modern versions (i.e., version 9 or later).

However, I would note that older versions like the version 5.1 file from 2004 in this thread (i.e., before version 8 or marked with "Cat Soft" in the Copyright file properties) are unsupported and disproportionally used in malware rootkits. The "PUP.Servu" designation seems appropriate for those older versions.