Recent Posts

1

RogueKiller / Re: no pup detection?

« Last post by Curson on December 01, 2020, 11:35:31 pm »

Hi,

Thanks for your feedback.
We were indeed missing some PUP detections. They will be added to our signature database as soon as possible.

If you are active on MalwareBytes forum, could you please ask them about the following detection ?

Code: [Select]

PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}I'm not sure, but this looks like a false positive to me.

Regards.

2

RogueKiller / Re: no pup detection?

« Last post by info@csmeerssen.nl on December 01, 2020, 12:51:51 pm »

malwarebytes....

3

RogueKiller / Re: no pup detection?

« Last post by info@csmeerssen.nl on December 01, 2020, 12:51:10 pm »

Ok here you go...

4

RogueKiller / Re: no pup detection?

« Last post by Curson on November 30, 2020, 06:55:30 pm »

Hi,

RogueKiller also detects PUPs.
Could you please attach both reports with your next reply ?

Regards.

5

RogueKiller / no pup detection?

« Last post by info@csmeerssen.nl on November 30, 2020, 05:02:12 pm »

I downloaded  Roguekiller trial, did a full scan. Compared it with malwarebytes. malwarebytes found a lot of PUP's, Roguekiller. Doesn't Roguekiller scans for PUP's?

6

RogueKiller / Re: Persistent bing.

« Last post by Curson on November 28, 2020, 01:09:37 pm »

Hi Ajohin,

That's strange.
Could you please attach RogueKiller JSON report with your next reply ?

Regards.

7

RogueKiller / Re: Persistent bing.

« Last post by Ajohin on November 28, 2020, 01:07:30 pm »

Legit really? It continously change my search engine back to bing, close all my non pinned tabs at the opening of firefox leaving but a bing page, and i noticed a slow down of the browser as well. Is there information to get rid of it in the docs?

Cheers!

8

RogueKiller / Re: Persistent bing.

« Last post by Curson on November 28, 2020, 12:45:35 pm »

Hi Ajohin,

PUM stands for Potentially Unwanted Modification. In your case, thoses entries are perfectly legit.
For more information, please refer to RogueKiller Documentation.

Regards.

Note : This thread has been moved to the "RogueKiller" section for clarity.

9

RogueKiller / Re: Firefox false/positives, GUI submit, Forum topic

« Last post by Curson on November 28, 2020, 12:42:22 pm »

Hi Pkshadow,

The file prefs.js is often targeted by malware in order to do browser redirections, display ads, etc, that's why it's classified as a PUM (Potentially Unwanted Modification). In the near future, PUM entries will be able to be excluded from the scan, so you won't be bothered by it anymore.
Your feedback about RogueKiler GUI is interesting. Could you please open a Support Ticket so that the concerned developer will be notified ?

Regarding your issue with posting in the False/Positive thread, it don't know why you couldn't. Anyway, I think your post cover a broader topic than just false positive, so creating a new thread is fine.

Regards.

10

RogueKiller / Persistent bing.

« Last post by Ajohin on November 27, 2020, 01:51:46 pm »

Greets!

Got this browser PUM comin back, even after deletions from roguekiller...