Is it a false positive?

[Daisy W]

Sir/madam,

 

Recently, I received an email from our customers telling that IOBit 360 reported our application - Advanced PC Tweaker as riskware. Obviously, it is a false positive.

 

Advanced PC Tweaker is a program that can help users repair problems, clean up drive space, manage backups so as to greatly optimize the computer. You can download it directly here and have a detection: advancedpctweaker com/download.php

 

We deeply hope that you can look into this issue immediately and correct your mistake and let us know the updates as soon as possible since this is a top priority issue for us.

 

For more other information, please contact:support@advancedpctweaker.com

 

Thanks so much! :razz:

[evilfantasy]

This will help explain. http://www.mywot.com/en/scorecard/advancedpctweaker.com

 

Build a legitimate business model and these issues won't happen...

[Krissy]

Also this will help explain http://www.siteadvisor.com/sites/advancedpctweaker.com

[Daisy W]

False Positive?

 

As we all know that anybody can give a comment about a website at mywot.com according to their own feelings without any proof.So this is not very truthful.

 

So please be kind to review our program.If what we can do, please feel free to contact us at

 

support@advancedpctweaker.com

 

Thanks!

[333halfevil]

As we all know that anybody can give a comment about a website at mywot.com according to their own feelings without any proof.So this is not very truthful.

 

So please be kind to review our program.If what we can do, please feel free to contact us at

 

support@advancedpctweaker.com

 

Thanks!

 

I will analyze your program once more, and if you tick the rogue criteria, I cannot help you.

[Daisy W]

Advanced PC Tweaker ---false positive?

 

Besides, according to the detection at http://www.siteadvisor.com/sites/advancedpctweaker.com, we have also contacted them to solve this program as soon as possible. So here we deeply hope that you can have another detection on our program and correct this issue ASAP. For any other information, please feel free to contact us at support@advancedpctweaker.com

 

 

Below is a report of your program:

OS:Windows XP

Version:0.2.1.75

Define Version:1069

Time:2009-7-27 16:58:35

 

|Name|Type|Description|ID|

Unwanted.Advanced PC Tweaker, Folder, C:\Program Files\Advanced PC Tweaker, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\AdvancedPCTweaker.exe, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\AdvancedPCTweaker.url, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\APCTHelp.chm, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\APCTUpdate.exe, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\APTEMail.exe, 3-2880

Unwanted.Advanced PC Tweaker, Folder, C:\Program Files\Advanced PC Tweaker\Code, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\errorlist.txt, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\OneClick.exe, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\unins000.dat, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\unins000.exe, 3-2880

Unwanted.Advanced PC Tweaker, File, C:\Program Files\Advanced PC Tweaker\Update.ini, 3-2880

Unwanted.Advanced PC Tweaker, Folder, C:\Documents and Settings\All Users\Start Menu\Programs\Advanced PC Tweaker, 3-2881

Unwanted.Advanced PC Tweaker, File, C:\Documents and Settings\All Users\Start Menu\Programs\Advanced PC Tweaker\Advanced PC Tweaker 1-Click Tweak.lnk, 3-2881

Unwanted.Advanced PC Tweaker, File, C:\Documents and Settings\All Users\Start Menu\Programs\Advanced PC Tweaker\Advanced PC Tweaker Help.lnk, 3-2881

Unwanted.Advanced PC Tweaker, File, C:\Documents and Settings\All Users\Start Menu\Programs\Advanced PC Tweaker\Advanced PC Tweaker on the Web.lnk, 3-2881

Unwanted.Advanced PC Tweaker, File, C:\Documents and Settings\All Users\Start Menu\Programs\Advanced PC Tweaker\Advanced PC Tweaker.lnk, 3-2881

Unwanted.Advanced PC Tweaker, File, C:\Documents and Settings\All Users\Start Menu\Programs\Advanced PC Tweaker\Uninstall Advanced PC Tweaker.lnk, 3-2881

Unwanted.Advanced PC Tweaker, File, C:\WINDOWS\Tasks\One-Click Tweak.job, 4-31505

Unwanted.Advanced PC Tweaker, Registry Key, HKEY_CURRENT_USER\Software\Advanced PC Tweaker, 4-31533

Unwanted.Advanced PC Tweaker, Registry Key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced PC Tweaker_is1, 4-31534

Rogue.Cax, File, C:\WINDOWS\system32\msvcp60.dll, 10-13643

Suspicious Malware_Heur, File, C:\Documents and Settings\Administrator\Desktop\AdvancedPCTweaker_Setup.exe, 8-660

[Daisy W]

Advanced PC Tweaker ---false positive?

 

I will analyze your program once more, and if you tick the rogue criteria, I cannot help you.

 

Thanks so much!

[evilfantasy]

according to their own feelings without any proof.

 

Start a topic at the WOT forums and we will give you detailed reasons why it is rated the way it is. We never rate a site or software good or bad without checking it out first. Nothing is done on "feelings."

[333halfevil]

Ok, first few questions:

 

Why does it install a new xpsp3res.dll and shell32.dll?

 

Why does it connect to an IP during install? :-?

 

Why is OneClick.exe blacklisted by 16 antivirus'?

 

Why do you have ambiguous file names with the same md5 hash?

[Daisy W]

Advanced PC Tweaker---False Positive?

 

Dear sir/madam,

 

Considering some mistakes in our program, now we have updated it to make it better. Also we have thoroughly tested our product with all the major anti-virus vendor as you can see:http://www.virustotal.com/zh-cn/analisis/48244d5de3d7022fb28f18efc48edd29bf7ba75a39829603dab22816cd729381-1248772278 and http://www.threatexpert.com/report.aspx?md5=5ed5131e4ca25050356a0fdba05cb24a.

 

So now, I still hope that you can have another detection of our program to solve this issue as soon as possible.

 

You can download it directly here:http://www.advancedpctweaker.com/download.php

 

Thanks so much!

[evilfantasy]

Why would you link to the download directly?

 

Virus/trojan/worm ...etc... are not the same as a rouge. Just because there are no malicious files doesn't mean there is no malicious intent.

 

This is from a very clean very new Windows install. I didn't bother letting the scan finish. Furthermore if I would have let the "empty keys" shown in the report be removed it would have crippled the system.

 

http://imagecows.net/out.php/i11309_apct.JPG

[Daisy W]

Is it a false positive?

 

Hi sir/madam,

 

So how about the detection result of the latest installation package? We sincerely hope that we can solve this problem as soon as possible for it is urgent.

 

Thanks so much!

[Daisy W]

Why would you link to the download directly?

 

Virus/trojan/worm ...etc... are not the same as a rouge. Just because there are no malicious files doesn't mean there is no malicious intent.

 

If like that, we can say that it is dangerous to use any program for no program can be said absolutely perfect.

[333halfevil]

After further testing, I have come to the conclusion that you will NOT be removed from detections. I tested 2 machines, one clean install, one I have used for a lot of work. Both showed same detections? Therefore you are giving false alerts, and I am unable to help you.

[enoskype]

Also, the Advanced PC Tweaker Support Forum has a red alert from McAfee SiteAdvisor.

 

Please see the attachment.

[Daisy W]

After further testing, I have come to the conclusion that you will NOT be removed from detections. I tested 2 machines, one clean install, one I have used for a lot of work. Both showed same detections? Therefore you are giving false alerts, and I am unable to help you.

 

Sorry for the delay reply to you. But would you be kind to tell us why was it deteted as virus? And how can we do to solve it? Thanks so much!

[Daisy W]

Is it a false positive?

 

Also, the Advanced PC Tweaker Support Forum has a red alert from McAfee SiteAdvisor.

 

Please see the attachment.

 

Thanks so much for your consideration for this problem. But I think the result in your attachment must be made before the update of the installation package. Now we have also contacted siteadvisor to solve this problem.They have throughly detected our Advanced PC Tweaker and replied that there was nothing dangerous in our program and this will be solved (green) in two weeks.

 

Thanks!

[Namelesswonder]

Dear sir/madam,

 

Considering some mistakes in our program, now we have updated it to make it better. Also we have thoroughly tested our product with all the major anti-virus vendor as you can see:http://www.virustotal.com/zh-cn/analisis/48244d5de3d7022fb28f18efc48edd29bf7ba75a39829603dab22816cd729381-1248772278 and http://www.threatexpert.com/report.aspx?md5=5ed5131e4ca25050356a0fdba05cb24a.

 

So now, I still hope that you can have another detection of our program to solve this issue as soon as possible.

 

You can download it directly here:http://www.advancedpctweaker.com/download.php

 

Thanks so much!

 

It still finds your program as Suspicious Malware_Huer. I have the latest Security 360. This could be a false positive as Avast did not detect anything and Malwarebytes' Anti-Malware (also all update before scanning) found nothing. :shock:

[Namelesswonder]

Sorry for posting *after* the mess, Stopped at page one and jumped to posting. :(

[333halfevil]

Your program still shows 'false' alerts, which makes it a rogue program. Once this is fixed, the detection will be removed.

[Tim Xue]

Hello, the author of Advanced PC Tweaker, your product is not virus so VirusTotal will not report, but it's the misleading/rogue/unwanted software.

 

Please check http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-041715-3450-99 and http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-041713-1831-99

 

Those 2 programs FixTool and Error Repair are the same as yours, your product is a misleading application that may give exaggerated reports of errors on the computer, in the form of fake alarm goal user to purchase.

[Tim Xue]

Also I noticed that the series of rogueware you made.

 

http://www.cheesesoft.com/press/

 

Registry Easy, Spyware Cease, Advanced PC Tweaker, most of your products are detected as rogueware by other AV company like Norton, check this page: http://www.symantec.com/business/security_response/threatexplorer/risks/index.jsp

 

That's the proof.

[Daisy W]

Your program still shows 'false' alerts, which makes it a rogue program. Once this is fixed, the detection will be removed.

 

So would you be kind to explain it more clearly, which part make it a rogue program? How can we do to fix it? Thanks!

[Daisy W]

Hello, the author of Advanced PC Tweaker, your product is not virus so VirusTotal will not report, but it's the misleading/rogue/unwanted software.

 

Please check http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-041715-3450-99 and http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-041713-1831-99

 

Those 2 programs FixTool and Error Repair are the same as yours, your product is a misleading application that may give exaggerated reports of errors on the computer, in the form of fake alarm goal user to purchase.

 

If it is not a virus, why can't you remove it from your virus database? And why was it regarded as misleading/rogue/unwanted software? Thanks!

[333halfevil]

You fake alerts in order to force users into buying your program. This makes your program misleading, which is why you are in the database.