Wanted to share in case this was a false positive.
Here is what Microsoft Forefront Endpoint is showing:
PUA:Win32/CandyOpen
Alert Level: Severe
Category: Potentially Unwanted Software
Description: This program has potentially unwanted behavior.
Recommended action: Remove this software immediately.
Items:
file:C:\Program Files (x86)\Duplicate Cleaner Pro\DuplicateCleaner.exe
file:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
file:C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Duplicate Cleaner Pro
startup:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
startup:C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro\Duplicate Cleaner Pro.lnk
uninstall:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Duplicate Cleaner Pro
I held on to the version 3 installer, but Forefront removed it when it was flagged.
Duplicate File Cleaner Pro (v3) Flagged as Malware
- DigitalVolcano
- Site Admin
- Posts: 1864
- Joined: Thu Jun 09, 2011 10:04 am
Re: Duplicate File Cleaner Pro (v3) Flagged as Malware
It's probably a false positive - this happens sometimes. I've double checked on VirusTotal (Duplicate Cleaner Pro 3.2.7) with the major AV engines and it seems OK.
Be sure to update your virus definitions and software.
Be sure to update your virus definitions and software.
Re: Duplicate File Cleaner Pro (v3) Flagged as Malware
SHA1 hash of what I have on hand.
Duplicate Cleaner Pro 3.27
782651a89c1e3def26e5d0b781be307fba705010
Duplicate Cleaner Pro 3.27
782651a89c1e3def26e5d0b781be307fba705010