Jump to content

Rising pc doctor


Guest BlairWitch

Recommended Posts

Guest BlairWitch

Hello. I installed the Rising pc doctor today

http://www.rising-global.com/products/rising-pc-doctor.html

Since then malwarebytes have popped up some boxes about blocked ip addressess, like these: IP-BLOCK 204.188.205.14 (Type: outgoing) IP-BLOCK 222.76.95.78 (Type: outgoing)

So i scanned the rising pc doctor installer with virustotal it was detected by clamav as W32.Trojan.Genome-14 https://www.virustotal.com/file/36380f2e6016ee787115e38a7b0310a357e7b485b22f5ad319260af577feebf4/analysis/1339313054/

My question really is that is it safe to use this program? Many say that it's a good program.

Link to post
Share on other sites

Guest BlairWitch

Now there is more development in this case. Malwarebytes detected the rising pc doctor updater as downloader trojan:

DETECTION C:\Program Files\Rising\RSD\Backup\RSD\RSSetup\updater.exe Trojan.Downloader QUARANTINE

This detection happened twice when the program was installed and also after i uninstalled the program and rebooted the computer.

Link to post
Share on other sites

Guest BlairWitch

The detections are False Positives. The software is safe.

That's good to know. I dumped the memory of the rising pc doctor driver protreg.sys and then uploaded it to virustotal and antivir detected it as rootkit.gen https://www.virustotal.com/file/ce6b40c1bde84fa767a7bd39a25afabf79b2b967c7a69f09fd43185b9e4a28db/analysis/1339343777/

I am so paranoid. Maybe i should quit using computer.

Link to post
Share on other sites

I use this software, its safe I don't know why the IP range is blocked. Nothing seems suspious on my machine since installing it. Its Anti-Trojan is cloud based so that is why you see it. It has no real time protection but has cloud task manager, and cloud software updater. I reported to MBAM FP to Rising so we shall see if MBAM fixes it.

Link to post
Share on other sites

Hello. I installed the Rising pc doctor today

http://www.rising-global.com/products/rising-pc-doctor.html

Since then malwarebytes have popped up some boxes about blocked ip addressess, like these: IP-BLOCK 204.188.205.14 (Type: outgoing) IP-BLOCK 222.76.95.78 (Type: outgoing)

So i scanned the rising pc doctor installer with virustotal it was detected by clamav as W32.Trojan.Genome-14 https://www.virustot...sis/1339313054/

My question really is that is it safe to use this program? Many say that it's a good program.

ClamAV is known for it's fp's on Windows files as it's a UNIX antivirus scanner. Detection rate isn't the best out there and certainly others have much better detection.

Link to post
Share on other sites

I installed the Rising pc doctor

There are many better A/virus programs, unless you are stuck in China and have limited internet.

As BornSlippery said "It is safe" but it is not regarded as a "Good" A/virus program in general -

If you run anything except a Linux system, I would choose one of the better known brands available -

Link to post
Share on other sites

  • 4 weeks later...
Guest BlairWitch

Hi,

I can't reproduce this detection. Just installed Rising PC Doctor and no detection here though. Can you verify this if mbam still detects? If so, please attach (zipped) the files to this thread that mbam detects.

Thanks.

Hello i just installed Rising pc doctor again and the file that was detected did not come with rising pc doctor installer that i downloaded yesterday. The one file that is in the quarantine is still detected by malwarebytes it was originally in the folder C:\Program Files\Rising\RSD\Backup\RSD\RSSetup which does not exist in this new installation.

Here is the detected file updater.zip

https://www.virustot...sis/1342170882/

Let me know if that file contains anything malicious. Thanks.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.