ESS v4.2.58.3 issue with Messenger Plus

Discussion in 'ESET Smart Security' started by Stoner81, Aug 14, 2010.

Thread Status:
Not open for further replies.
  1. Stoner81

    Stoner81 Registered Member

    Joined:
    Aug 23, 2008
    Posts:
    30
    Hey chaps just letting you know that ESS finds this as a potentially unwanted program and prevents updates etc but as far as I know the program is safe to use been using it for a couple of years.

    Stoner81.
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It's not FP.
     
  4. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    MP is loaded with a couple of things some people don't want - hence it's a Potentialy Unwanted Program.

    I've removed it from quite a few PCs over the years to clear up pop ups ads and other issues - read the T&C for the software to see what you are allowing to be installed on your PC. It's not as clean as you think but not a virus as such.

    ETA: I notice that according to their website the Sponsor Option is now optional. It's probably the Sponsor payload that's being detected.

     
  5. Stoner81

    Stoner81 Registered Member

    Joined:
    Aug 23, 2008
    Posts:
    30
    Yeah it is but that can be removed during the install process but ESS still flags it and also prevents the update check.

    Stoner81.

    EDIT - File submitted for analysis.
     
    Last edited: Aug 17, 2010
  6. camor

    camor Registered Member

    Joined:
    Jul 9, 2008
    Posts:
    30
    Any news about this topic?
    ESS 4.2.64.12
    Carlos
     
  7. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    It is not a False Positive.
    "Potentially Unwanted Applications" and "Potentially Unsafe Applications" are within "grayware" category, Not "malware".
     
    Last edited: Sep 18, 2010
  8. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Messenger Plus is confirmed adware

    All portions of the program should be uninstalled immediately.

    As you can see from my Hosts file, Circle Development is not software you would want on your machine.
    Code:
     # [c2 Media Group][Circle Developement][66.220.17.0 - 66.220.17.255]
    127.0.0.1  www.adserver5.com
    127.0.0.1  cidhelp.com
    127.0.0.1  dns-look-up.com
    127.0.0.1  ads.dns-look-up.com #[Win32/TrojanDownloader.Swizzor]
    127.0.0.1  ayb.dns-look-up.com #[TR/Swizzor.A][AdWare.Win32.Lop.ag]
    127.0.0.1  nb.dns-look-up.com
    127.0.0.1  upd.dns-look-up.com
    127.0.0.1  o21343.nb.host-domain-lookup.com #[McAfee.Swizzor!hv.j!87ad9031ef7d]
    127.0.0.1  lop.com #[Wildcard DNS]
    127.0.0.1  ao.lop.com
    127.0.0.1  ayb.lop.com #[McAfee.Swizzor]
    127.0.0.1  bins.lop.com
    127.0.0.1  i.stealfrommvps.lop.com
    127.0.0.1  k17177.bins.lop.com
    127.0.0.1  img.lop.com
    127.0.0.1  sue.lop.com
    127.0.0.1  srch.lop.com
    127.0.0.1  d4308.upd.lop.com #[McAfee.Swizzor]
    127.0.0.1  r25407.upd.lop.com
    127.0.0.1  upd.lop.com
    127.0.0.1  www1.lop.com
    127.0.0.1  www.lop.com
    127.0.0.1  maxexp.com
    127.0.0.1  ayb.maximumexperience.com #[McAfee.Swizzor]
    127.0.0.1  netbios-wait.com
    127.0.0.1  ads.netbios-wait.com
    127.0.0.1  ayb.netbios-wait.com
    127.0.0.1  upd.netbios-wait.com #[Trojan.Win32.Obfuscated.en]
    127.0.0.1  www.netbios-wait.com #[Adware.Memini]
    127.0.0.1  spawnet.com
    127.0.0.1  www.spawnet.com
    127.0.0.1  ayb.trinityacquisitions.com #[McAfee.Swizzor][Wildcard DNS] 
     
    Last edited: Sep 17, 2010
Thread Status:
Not open for further replies.