Krasje42 1 Posted January 11, 2018 Share Posted January 11, 2018 Hello, https://www.drivereasy.com/ I've been running this program for a very long time since today it got blocked by ESET somehow, I've searched on virus radar/threat Encylopedia nothing show up. Any idea why all of a sudden this program is blocked or the URL it uses to check out for new drivers. Link to comment Share on other sites More sharing options...
Administrators Marcos 3,886 Posted January 12, 2018 Administrators Share Posted January 12, 2018 It's a Deceptor (https://customer.appesteem.com/deceptors). If you think that benefits of using the application outweigh possible risks, you can exclude the application from detection and add the domain / url to the list of allowed addresses. Link to comment Share on other sites More sharing options...
persian-boy 22 Posted January 12, 2018 Share Posted January 12, 2018 (edited) Don't exclude it! that application is not safe.Use wise diver care which is safe and reliable. Edited January 12, 2018 by persian-boy Link to comment Share on other sites More sharing options...
Daedalus 16 Posted January 12, 2018 Share Posted January 12, 2018 I just found out that Driver Booster 5 Free can update much more than Wise Driver Care. https://www.iobit.com/en/driver-booster.php Link to comment Share on other sites More sharing options...
Krasje42 1 Posted January 12, 2018 Author Share Posted January 12, 2018 9 hours ago, persian-boy said: Don't exclude it! that application is not safe.Use wise diver care which is safe and reliable. Ok thnx for the tip, will switch to that one. Also thnx for the other advice Link to comment Share on other sites More sharing options...
Krasje42 1 Posted January 12, 2018 Author Share Posted January 12, 2018 45 minutes ago, Daedalus said: I just found out that Driver Booster 5 Free can update much more than Wise Driver Care. https://www.iobit.com/en/driver-booster.php I had that one, Drive Easy gave much more updates which i manually checked and confirmed they could be updated. As i said i will try Wise driver care. Link to comment Share on other sites More sharing options...
Slicendice 0 Posted January 16, 2018 Share Posted January 16, 2018 (edited) Awesome, and this morning Eset deleted my drivereasy.exe. This is a legit program I purchased some time ago. Are you now saying it's a virus? hxxp://www.virusradar.com/en/MSIL_UwS.DriverEasy.A/description This seems to have stemmed from another program using drivereasy.com as a url when it runs. explained here apparently by an employee of Driver Easy. Especially see post #5 onwards. https://forums.malwarebytes.com/topic/205109-false-positive-of-driver-easy-by-adwcleaner/ Edited January 16, 2018 by Slicendice Link to comment Share on other sites More sharing options...
Administrators Marcos 3,886 Posted January 16, 2018 Administrators Share Posted January 16, 2018 4 hours ago, Slicendice said: Awesome, and this morning Eset deleted my drivereasy.exe. This is a legit program I purchased some time ago. Are you now saying it's a virus? No, we are not saying it's a virus or another kind of malware. We are saying it's a Deceptor. It's listed in the list of Deceptors at https://customer.appesteem.com/deceptors. It is in the interest of its vendor to communicate with AppEsteem and work on resolving the issues. Link to comment Share on other sites More sharing options...
Slicendice 0 Posted January 16, 2018 Share Posted January 16, 2018 I have sent a message to Driver Easy hopefully they can clear this up with you. Pretty sure this will be at least partly due to the behaviour of the malware as indicated in the threads I linked. Link to comment Share on other sites More sharing options...
jdashn 12 Posted January 16, 2018 Share Posted January 16, 2018 Looking at the AppEsteem site it looks like the issues with driver easy are the following: 1. The application scheduled tasks cannot be disabled using standard platform-provided methods. Scheduled tasks are still active even after disabling it using the software provided method. 2. The application fraudulently elevates its user trust level by displaying fake, unverifiable or expired endorsements. The app display "Gold Microsoft Partner" logo which is unable to be verified. 3. The application creates undisclosed scheduled tasks to perform actions without the user's knowledge and consent. 4. When running on a virtual machine, app does not report "out of date" for the same drivers/driver info that it reports out of date on a native hosted os. There is no mention of this variance in behavior in EULA or in the product If you go to the site linked by Marcos, and search for Driver Easy you'll even see picture evidence of some of these issues. i'm guessing that Driver Easy won't be able to clear up these issues without significant changes to their marketing and application, which will likely not happen anytime soon as most companies that do these sorts of things know full well they're being sketchy. I hope this helps!! Jdashn Link to comment Share on other sites More sharing options...
Slicendice 0 Posted January 16, 2018 Share Posted January 16, 2018 Jdashn, thank you very much for the detailed information - now I understand. I will follow up with them to see what they have to say. Link to comment Share on other sites More sharing options...
Sophie DE 0 Posted January 17, 2018 Share Posted January 17, 2018 Hi guys! This is Sophie with Easeware. First off, thanks so much for your attention to us and your kindness in believing us. This false positive is now fixed. We made instant contact with ESET when we received reports from our very warm-hearted users saying that Driver Easy is blocked. Then we received a report from AppEsteem, telling us what are the possible causes for the false positive. We managed to release a new version as quickly as we can, and sent it to AppEsteem. The very kind and friendly AppEsteem support helped us with the evaluation effectively, and we are off the Deceptor list today. If you're interested in more details, here is our blog about this incident: https://www.drivereasy.com/a-clarification-on-the-recent-false-positive-issue-with-driver-easy/ As you may see at the end of the blog, we will help to extend your license key, or send you a free license key for your help. Anyway, this incident is now over, and we think of it as a great opportunity for us to improve. Thank all of you for your attention to this matter, and your trust in us. Feel free to let us know if you have anything to say to us. Wish all of you a very nice day! Link to comment Share on other sites More sharing options...
Slicendice 0 Posted January 18, 2018 Share Posted January 18, 2018 (edited) I contacted their support and was told there is a new version released 16th Jan 2018 to resolve the above issues, and that they have contacted Eset to remove this block. No.1 for example is in the change log ; + You can choose whether to create a scheduled task when you install Driver Easy – Fixes a bug with the scheduled scan. So now when you disable or enable the scheduled scan, the same setting applies to your system etc. However I can't download it or verify anything until Eset remove the block so I can use the program I want to use and paid for. Edited January 18, 2018 by Slicendice Link to comment Share on other sites More sharing options...
Sophie DE 0 Posted January 18, 2018 Share Posted January 18, 2018 Hi guys, This is Sophie with Easeware. I posted a short reply hours ago, but the post didn't get released... probably because it contained a link.. Anyways, we just want to say how much we appreciate all your effort here. We were off the Deceptor list yesterday, according to one of the very nice and friendly AppEsteem support. We released the latest version yesterday, and we have filed another report to ESET for the false positive issue. We're still waiting for the reply. We think of this incident as an opportunity for us to improve, and we sure did make some headway from here. Once again, thank you so much for your attention and your believe in us. If you still have any question, feel free to contact us via our support email. Have a nice day, everyone! Link to comment Share on other sites More sharing options...
Slicendice 0 Posted January 18, 2018 Share Posted January 18, 2018 (edited) Many thanks Sophie, and to Driver Easy for dealing with it promptly. It seems at this moment my Eset totally blocks access to the install file not sure if they have updated their signatures yet anyway (I checked for an signature update) All the best, Mark Edited January 18, 2018 by Slicendice Link to comment Share on other sites More sharing options...
Administrators Marcos 3,886 Posted January 18, 2018 Administrators Share Posted January 18, 2018 This forum is not a channel for disputing detections. Please follow the instructions at https://support.eset.com/kb141. Having said that, we'll draw this topic to a close. Link to comment Share on other sites More sharing options...
Recommended Posts