harveyftw

Cheat engine false positive

16 posts in this topic

Just did a scan and cheat engine 6.3 is detected as a trojan. false positive clearly as it was downloaded from the official website http://www.cheatengine.org/   . any1 else had this problem and please fix!

Share this post


Link to post
Share on other sites

Hi,

 

Can you zip & attach the exact file that was detected + malwarebytes developers log?

http://forums.malwarebytes.org/index.php?showtopic=3228

 

We probably detect this one as PUP.Optional.OpenCandy, since it has OpenCandy (an advertising software module) bundled, which is often unwanted, hence the PUP. so if this is the case, then please see here: http://forums.malwarebytes.org/index.php?showtopic=130207

Share this post


Link to post
Share on other sites

will let this other scan finish will post in around 30 mins for you. thank you

Share this post


Link to post
Share on other sites

i cant find the trojan as i deleted it before but i do happen to have 2 .pup files.

Share this post


Link to post
Share on other sites
Malwarebytes Anti-Malware (PRO) 1.75.0.1300

www.malwarebytes.org

 

Database version: v2013.08.25.06

 

Windows 8 x64 NTFS

Internet Explorer 10.0.9200.16660

Alex :: HARVEY [administrator]

 

Protection: Enabled

 

26/08/2013 11:47:20

mbam-log-2013-08-26 (11-47-20).txt

 

Scan type: Full scan (C:\|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 568857

Time elapsed: 1 hour(s), 13 minute(s), 39 second(s)

 

Memory Processes Detected: 0

(No malicious items detected)

 

Memory Modules Detected: 0

(No malicious items detected)

 

Registry Keys Detected: 0

(No malicious items detected)

 

Registry Values Detected: 0

(No malicious items detected)

 

Registry Data Items Detected: 0

(No malicious items detected)

 

Folders Detected: 0

(No malicious items detected)

 

Files Detected: 3

C:\Program Files (x86)\Cheat Engine 6.3\standalonephase2.dat (Trojan.Cheat) -> Quarantined and deleted successfully.

C:\Users\Alex\AppData\Local\Temp\is-4425A.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

C:\Users\Alex\AppData\Local\Temp\is-66802.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

 

(end)

Share this post


Link to post
Share on other sites

Hi,

 

As for the PUP.Optional.OpenCandy, that I explained earlier already. :)

 

The Trojan.Cheat detection will be deleted in next database update as this is no threat.

 

Thanks for reporting

Share this post


Link to post
Share on other sites

Hi,

 

As for the PUP.Optional.OpenCandy, that I explained earlier already. :)

 

The Trojan.Cheat detection will be deleted in next database update as this is no threat.

 

Thanks for reporting

 

would it be detected today?

Share this post


Link to post
Share on other sites

Hi,

 

I am unsure what you mean. We removed the Trojan.Cheat detection, since it wasn't a threat.

The PUP.Optional.OpenCandy detection will stay.

Share this post


Link to post
Share on other sites

so this update today would of removed the false positive?  and yes i understand about the .pup thats unwanted

Share this post


Link to post
Share on other sites

yes, we already removed detection a few updates ago :)

(We update our database multiple times a day)

Share this post


Link to post
Share on other sites

would installing it without open candy fix the .pup errors? as im given the option to just have it standalone

Share this post


Link to post
Share on other sites

Yes, if you unselect OpenCandy during the install screen (if possible), then it won't install the OpenCandy Advertisement module.

In either way, you have it installed already, so no need to reinstall again. Mbam has removed the OpenCandy module already and you can select to restore the Trojan.Cheat detection from your Malwarebytes quarantine folder.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.