ESS v4.2.58.3 issue with Messenger Plus

Hey chaps just letting you know that ESS finds this as a potentially unwanted program and prevents updates etc but as far as I know the program is safe to use been using it for a couple of years.

Stoner81.

 

submit it if you have a moment
http://kb.eset.com/esetkb/index?page=content&id=SOLN141

 

It's not FP.

 

MP is loaded with a couple of things some people don't want - hence it's a Potentialy Unwanted Program.

I've removed it from quite a few PCs over the years to clear up pop ups ads and other issues - read the T&C for the software to see what you are allowing to be installed on your PC. It's not as clean as you think but not a virus as such.

ETA: I notice that according to their website the Sponsor Option is now optional. It's probably the Sponsor payload that's being detected.

 

Yeah it is but that can be removed during the install process but ESS still flags it and also prevents the update check.

Stoner81.

EDIT - File submitted for analysis.

 

Any news about this topic?
ESS 4.2.64.12
Carlos

 

It is not a False Positive.
"Potentially Unwanted Applications" and "Potentially Unsafe Applications" are within "grayware" category, Not "malware".

 

Messenger Plus is confirmed adware

All portions of the program should be uninstalled immediately.

As you can see from my Hosts file, Circle Development is not software you would want on your machine.

Code:

 # [c2 Media Group][Circle Developement][66.220.17.0 - 66.220.17.255]
127.0.0.1  www.adserver5.com
127.0.0.1  cidhelp.com
127.0.0.1  dns-look-up.com
127.0.0.1  ads.dns-look-up.com #[Win32/TrojanDownloader.Swizzor]
127.0.0.1  ayb.dns-look-up.com #[TR/Swizzor.A][AdWare.Win32.Lop.ag]
127.0.0.1  nb.dns-look-up.com
127.0.0.1  upd.dns-look-up.com
127.0.0.1  o21343.nb.host-domain-lookup.com #[McAfee.Swizzor!hv.j!87ad9031ef7d]
127.0.0.1  lop.com #[Wildcard DNS]
127.0.0.1  ao.lop.com
127.0.0.1  ayb.lop.com #[McAfee.Swizzor]
127.0.0.1  bins.lop.com
127.0.0.1  i.stealfrommvps.lop.com
127.0.0.1  k17177.bins.lop.com
127.0.0.1  img.lop.com
127.0.0.1  sue.lop.com
127.0.0.1  srch.lop.com
127.0.0.1  d4308.upd.lop.com #[McAfee.Swizzor]
127.0.0.1  r25407.upd.lop.com
127.0.0.1  upd.lop.com
127.0.0.1  www1.lop.com
127.0.0.1  www.lop.com
127.0.0.1  maxexp.com
127.0.0.1  ayb.maximumexperience.com #[McAfee.Swizzor]
127.0.0.1  netbios-wait.com
127.0.0.1  ads.netbios-wait.com
127.0.0.1  ayb.netbios-wait.com
127.0.0.1  upd.netbios-wait.com #[Trojan.Win32.Obfuscated.en]
127.0.0.1  www.netbios-wait.com #[Adware.Memini]
127.0.0.1  spawnet.com
127.0.0.1  www.spawnet.com
127.0.0.1  ayb.trinityacquisitions.com #[McAfee.Swizzor][Wildcard DNS]