Page 1 of 1
TextCrawler marked as PUA:Win32/CandyOpen
Posted: Mon Oct 30, 2017 12:42 pm
by wardian
Hello
This morning I arrived at work to find our licensed version of TextCrawler had been marked as PUA:Win32/CandyOpen by Microsoft System Essentials.
All installations have been removed (2).
https://www.reasoncoresecurity.com/text ... 7bdb4.aspx
Re: TextCrawler marked as PUA:Win32/CandyOpen
Posted: Mon Oct 30, 2017 9:44 pm
by DigitalVolcano
It's probably a false positive - this happens sometimes. I've double checked on VirusTotal with the major AV engines and it seems OK.
Be sure to update your virus definitions and software. TextCrawler 2 and 3 don't use any bundling/PUA.
Re: TextCrawler marked as PUA:Win32/CandyOpen
Posted: Tue Oct 31, 2017 1:49 pm
by TLDG
Could a false positive have come about due to some of your installers including OpenCandy in the past?
If so, could you please confirm - which were the last version numbers of TC and DC to bundle it?
Many thanks.
Re: TextCrawler marked as PUA:Win32/CandyOpen
Posted: Tue Oct 31, 2017 2:37 pm
by DigitalVolcano
Duplicate Cleaner (Free version only) displayed the OpenCandy offer a long time ago - 2013 at the latest, version 3.2.1
I can't recall if TextCrawler Free ever did - if so it would be an old version - 2.4 or earlier.