Adlice forum

Software feedback => RogueKiller => Topic started by: Faergor on December 17, 2023, 09:40:51 PM

Title: Possible false positive
Post by: Faergor on December 17, 2023, 09:40:51 PM

Hello, I have BS player installed, what roguekiller found is Packed.Gen in bsplay.exe. Likely a false positive.
Can you fix this/get you confirm please if this is indeed false positive?
Thanks

Attaching a log.

Title: Re: Possible false positive
Post by: Curson on December 20, 2023, 08:18:56 PM

Hi Faergor,

BS.Player forcefully install BS.ControlBar, which is Adw.Conduit.
The binary itself is not malicious but since the installer install malware, we have decided to flag it as Packed.Gen.

If you know what you are doing, you can saftly restore the file but please be warry when updating this application or running the installer in any way.

Regards.

Title: Re: Possible false positive
Post by: Faergor on December 20, 2023, 08:25:00 PM

Is adw conduit harmful?
I deleted both files that were flagged as malicious.

I am not sure why has that appeared because I had bsplayer installed for a long time and it never showed anything like that before. Not sure if it updated by itself if it does that at all and therefore it installed bs controlbar, but IMO it might have been on my pc for a long time since I installed bsplayer months/years ago but roguekiller detected it only now?

Title: Re: Possible false positive
Post by: Curson on December 20, 2023, 08:31:13 PM

Hi Faergor,

Not really anymore.
The build BS.Player install is old and most of the hardcoded domains are down now.

Could you please check the Add/Remove list of your Windows install for "BS Player Control Bar" ?

Regards.

Title: Re: Possible false positive
Post by: Faergor on December 20, 2023, 11:06:47 PM

Quote from: Curson on December 20, 2023, 08:31:13 PM

Hi Faergor,

Not really anymore.
The build BS.Player install is old and most of the hardcoded domains are down now.

Could you please check the Add/Remove list of your Windows install for "BS Player Control Bar" ?

Regards.

I checked and there was no bs player control bar, only bs player free.
So, what is the conclusion? It was not harmful and it is ok?
I have both files deleted anyway.
Thanks :)

Title: Re: Possible false positive
Post by: Curson on December 20, 2023, 11:54:27 PM

Hi Faergor,

If no toolbar is installed, it is safe.
Could I ask you why you prefer it to well-known media players ?

Regards.

Title: Re: Possible false positive
Post by: Faergor on December 21, 2023, 05:03:41 PM

Quote from: Curson on December 20, 2023, 11:54:27 PM

Hi Faergor,

If no toolbar is installed, it is safe.
Could I ask you why you prefer it to well-known media players ?

Regards.

Oh, I thought it was well known. I have been using it for years along with vlc. But I have not noticed such behaviour until now. Weird that they are forcing toolbar.

Title: Re: Possible false positive
Post by: Curson on December 22, 2023, 04:25:25 PM

Hi Faergor,

Thanks.
Toolbar was used to monetize their Free version.

Regards.