Eset

Discussion in 'other anti-virus software' started by donaddams, Jan 19, 2023.

  1. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,626
    There are some scan categories that can't be fixed in the trial version. But I also don't agree with the verdict from AppEsteem. However, I'm sure it will resolved quickly. If the developers are in contact with AppEsteem, they will tell them what changes they need to make to get it resolved.

    But regarding PUP detection in general, there are two problems. There is no specific definition of what a PUP is, so antivirus vendors can classify anything as a PUP if they want. Secondly, when security software finds PUPs, it's very rare for them to give any explanation of what a PUP is. So to the average user will understandably make the mistake of thinking that PUPs are malware and need to be removed. Huorong Internet Security is the only antivirus I can think of that gives a clear explanation of what a PUP is. But it's not a product I recommend because of its poor detection rate.
     
  2. AdvancedSetup

    AdvancedSetup Security Expert

    Joined:
    May 8, 2008
    Posts:
    141
    Location:
    USA
    Concerning the program Kerish Doctor

    Malwaretips also has a posting about it.
    https://malwaretips.com/threads/kerishdoctor-a-potentially-unwanted-application.120213/

    I was not able to find a discussion on the ESET forums concerning it except for one from a couple years ago.

    I cannot speak for ESET but in the case of Malwarebytes, the program is alerting on cleaning Registry items that are a bit dubious and not recommended.

    Microsoft support policy for the use of registry cleaning utilities
    https://support.microsoft.com/en-us...tilities-0485f4df-9520-3691-2461-7b0fd54e8b3a


    In some other network scans, I see that the program appears to get most of its downloads from the Russia regional area and some in America.

    Registrar: Registrar of Domain Names REG.RU LLC

    Updated Date: 2020-08-15T06:57:01Z
    Creation Date: 2005-03-29T07:32:03Z
    Registry Expiry Date: 2023-03-29T07:32:03Z6:01 PM

    The digital certificate for the program shows the following.

    Voronezh, Russia
    https://en.wikipedia.org/wiki/Voronezh

    to.symcb.com/to.crl



    Concerning Malwarebytes alerting and quarantining Kerish Doctor

    First, if the program file was quarantined then you can restore the file from quarantine.

    Please see the following article on how to restore.

    Restore or delete quarantined items in Malwarebytes for Windows
    https://support.malwarebytes.com/hc...quarantined-items-in-Malwarebytes-for-Windows


    Please see the following article on how to add exclusions to Malwarebytes.

    Exclude detections in Malwarebytes for Windows
    https://support.malwarebytes.com/hc...xclude-detections-in-Malwarebytes-for-Windows

    Use the Allow File of Folder. Then browse to this file entry and add it.

    Code:
    C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe

    At this point Malwarebytes should no longer detect the program
     
  3. Kerish_Products

    Kerish_Products Registered Member

    Joined:
    Jan 22, 2023
    Posts:
    2
    Location:
    Worldwide
    Hello, we are Kerish Products - system software developer.
    Due to the incident, we would like to make an official statement.

    First of all, we want to say that we are unpleasantly surprised by the false detection of our Kerish Doctor product as potentially unwanted software.

    We have been developing our Kerish Doctor product for 18 years since 2005. Kerish Doctor is a classic Shareware product. Our product has a trial period of work and free of charge services the computer within 15 days. After that, if the user is satisfied with the work of the program and wants to continue working with it, then he has the right to buy a license key and use it to activate the program for further work.

    Over the past 18 years, our product has been doing the following:
    • Defragments HDD drives when the computer is idle.
    • Monitors the temperature of PC devices as well as S.M.A.R.T disk information
    • Updates device drivers to the latest version from our server (monthly updated driver database)
    • Removes remnants of uninstalled apps if present
    • Cleans PC from junk (like CCleaner)
    • Protects PC from malware (daily updated threat database)
    • Fixes corrupt entries in the system registry
    And much more that is already available in the trial version.

    On January 19, appesteem_com site suddenly published a series of claims about our product.

    https://www.kerish.org/images/Claim-01.png
    https://www.kerish.org/images/Claim-02.png

    Based on this information, several antiviruses began to falsely detect our software as potentially unwanted application.
    This causes the application to stop working for thousands users of Kerish Doctor.
    In fact, this antiviruses is permanently removing the ability to use our software for all of our users who have the misfortune of having both of these products on a PC.
    In addition, we have an unfair blow to our reputation.

    We have already solved all the claims of site appesteem_com, although we do not agree with them.
    We also contacted them and provided evidence of the correction of their claims.
    We hope that all unfair accusations of our product will be removed as soon as possible.

    https://www.kerish.org/images/Claim-Fixed-01.png
    https://www.kerish.org/images/Claim-Fixed-02.png


    We are ready to provide any support that will help resolve this conflict.
    We are ready to answer any questions about the operation and functioning of our product.
     
  4. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,675
    Location:
    South Wales, UK
    So glad that Kerish Products have responded both to AE & here...that is thee professional approach. And I for one do not doubt that they are reputable company, with a top notch product (in MY experience of using it)...otherwise I would not have given them my business/used their product.

    I would have thought that if AE is also a reputable company in terms of what they do (and I am not saying that they are not...as I had not heard of them before this sorry episode so do not really know them), that they would first have had the decency to contact Kerish with their findings and give them a chance to discuss & resolve them BEFORE being the cause of all of the fuss, frustration, etc., that their actual actions have caused. :shifty:

    Hopefully, this will now be speedily resolved to everyone involved satisfaction, and we can put this one to bed. :isay:
     
  5. kstev99S

    kstev99S Registered Member

    Joined:
    Jan 22, 2023
    Posts:
    4
    Location:
    United States
    Exactly. I have used Kerish for a few years now, primarily to monitor programs (since WinPatrol died) that like to secretly add themselves to Startup. It also regularly removes un-needed temp files that only waste space. If Kerish is suddenly being flagged, then why not the few dozen other similar apps like Ccleaner, Wise Cleaner, System Mechanic etc. that have been around for years? I am using Malwarebytes and their response to what I consider a False Positive was arrogance and to post some screenshots of Kerish flagging registry entries and then abruptly close the thread before I could even reply.

    Strange that now Kerish is appearing on many PUP lists which proves that regardless of whether it's Eset, Malwarebytes, or whatever, that many share the same lists. Not necessarily a bad thing. I have contacted the Kerish developers concerning this matter and they are aware. Some consider their program as "Snake Oil" but when used responsibly it can be a great tool to remove unwanted startups and other tasks. I am always a little skeptical of the registry cleaning, and do not advise it. I have been burned more than once by Malwarebytes. The other time it was (and still is) stopping my VPN split tunneling from working. I may just drop Malwarebytes all together and return to Windows Defender.
     
  6. plat

    plat Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    2,233
    Location:
    Brooklyn, NY
    Let Kerish do the heavy lifting. That's what one is paying them to do. In time, this will likely resolve one way or another. I guess one needs to compromise the convenience for now by exclusions, if one is willing to go that route.
     
  7. kstev99S

    kstev99S Registered Member

    Joined:
    Jan 22, 2023
    Posts:
    4
    Location:
    United States
    Better add C:\Program Data\Kerish Products to the exclusions as well. I just checked Kerish for an update, and the update file in that folder was flagged.
     
  8. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,675
    Location:
    South Wales, UK
    I wrote to their MD about this, but I suspect that they already were aware, as their post above came very quickly after that. Hopefully they can do the necessary with AE so that we can all move on from this sorry episode. :isay:
     
  9. kstev99S

    kstev99S Registered Member

    Joined:
    Jan 22, 2023
    Posts:
    4
    Location:
    United States
    Also add C:\ProgramData\Kerish Products\Kerish Doctor\Update\KerishDoctor.exe to exclusions. It was flagged when the program updated.
     
  10. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,626
    Well I originally had posted about it being no longer detected at VirusTotal, but it is still detected.
     
    Last edited: Jan 24, 2023
  11. Kerish_Products

    Kerish_Products Registered Member

    Joined:
    Jan 22, 2023
    Posts:
    2
    Location:
    Worldwide
    We are pleased to announce that site AppEsteem no longer has claims to our product. All claims from this site have been resolved. We are currently in active contact with ESET to resolve the issue. Unfortunately, the developers of antivirus Malwarebytes did not consider it necessary to answer us at all and closed the corresponding topic on the official forum. In other words, they were not very friendly in terms of solving the problem.
     
  12. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,587
    The president and CEO of The Anti-Malware Testing Standards Organization ,is also the president of App Esteem.Also most of the well known AVs are members of AMTS.I too have found kerish to be good over the years.I also noticed that vitsoft registry fix (another app that has performed exemplary over the years for me ) was also flagged for dubious reasons.App esteem seems to have down loaded the professional edition and moaned about how it trys to get you to purchase before it will clean deep scanned objects.Of course they just could have downloaded the free version widely available ...for example from here...
    http://www.softsea.com/review/Vit-Registry-Fix-Free-Edition.html..
    Of course most av suites now also perform the functions that kerish and vitsoft do.I'm sure there's no conflict there though ..

     
  13. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,626
    ESET no longer detects Kerish Doctor. Rising is now the only vendor at VirusTotal that detects the installer.
     
  14. kstev99S

    kstev99S Registered Member

    Joined:
    Jan 22, 2023
    Posts:
    4
    Location:
    United States
    They never are. Their arrogance is causing me to look elsewhere for AV. I have used MBAM for more than 15 years.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.