Duplicate File Cleaner Pro (v3) Flagged as Malware

The best solution for finding and removing duplicate files.
Post Reply
hammonj7
Posts: 1
Joined: Mon Oct 30, 2017 6:18 pm

Duplicate File Cleaner Pro (v3) Flagged as Malware

Post by hammonj7 »

Wanted to share in case this was a false positive.

Here is what Microsoft Forefront Endpoint is showing:

PUA:Win32/CandyOpen

Alert Level: Severe

Category: Potentially Unwanted Software

Description: This program has potentially unwanted behavior.

Recommended action: Remove this software immediately.

Items:
file:C:\Program Files (x86)\Duplicate Cleaner Pro\DuplicateCleaner.exe
file:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
file:C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Duplicate Cleaner Pro
startup:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
startup:C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
uninstall:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Duplicate Cleaner Pro

I held on to the version 3 installer, but Forefront removed it when it was flagged.
User avatar
DigitalVolcano
Site Admin
Posts: 1725
Joined: Thu Jun 09, 2011 10:04 am

Re: Duplicate File Cleaner Pro (v3) Flagged as Malware

Post by DigitalVolcano »

It's probably a false positive - this happens sometimes. I've double checked on VirusTotal (Duplicate Cleaner Pro 3.2.7) with the major AV engines and it seems OK.

Be sure to update your virus definitions and software.
User avatar
therube
Posts: 615
Joined: Tue Jun 28, 2011 4:38 pm

Re: Duplicate File Cleaner Pro (v3) Flagged as Malware

Post by therube »

SHA1 hash of what I have on hand.

Duplicate Cleaner Pro 3.27
782651a89c1e3def26e5d0b781be307fba705010
Post Reply