Auslogics Products are detected as potentionally unwanted apps

[yardstudio 0]

All Auslogic products are detected as threats. But Auslogics says that this all are false detections.

It is true or not. Is right to afraid this products? 

https://www.auslogics.com/en/software/

Cleaning by ESET broke Auslogics applications

Quote

Hello ,

Thank you for your message and I am sorry there was an issue installing our software.
I would like to assure you that we do not include malware or viruses in our installers. We only work with reliable partners, whose offers are screened and tested to be malware and virus-free. If an installation is flagged by an antivirus program, it must be a false-positive, which unfortunately may happen with legitimate software. No third-party product is ever installed silently with our programs - you are always shown the offer first and given the option to decline it.
Please, follow instructions by the link to add our products to ESET Exclusions list:

https://docs.google.com/document/d/1pM3Cy58oFFDBKigCloKTRLVD3blx6YXubdsTxNQsym8/edit?usp=sharing

Thank you for being our customer!

Best regards,
Alex Bratton
Support Team | Auslogics Software Pty Ltd
Sydney, Australia
hxxp://www.auslogics.com

This e-mail and any attachments are confidential. Review, disclosure, copying, or other use of this information by anyone other than the intended recipients is prohibited. Please notify us immediately and delete this e-mail message and any attachments it contains if you are not the intended addressee.

We believe that this e-mail and its contents are virus and spyware free. However, it remains your responsibility to carry out virus and spyware check. Auslogics does not accept liability for any loss or damage arising from the use of this e-mail, its attachments or the information contained in this e-mail.
On 26.03.2018 19:07, Auslogics Team wrote:
> Why all your product is by ESET AV marked as unsafe ???
>
> When I am try clean it, then Runtime Error is displayed
>
> https://i.imgur.com/Pb9Zlc3.png
> https://i.imgur.com/wId4fmt.png
> https://i.imgur.com/NVh17ye.png
>
>
> ====================================
>
> Department:       tech
> E-mail:           
> Name:            
> Program:          Auslogics Driver Updater
> Version:          Latest ver. 1.12.0.0 (03/15/2018)
> OS:               Windows 32-bit
>
> Additional Fields:
>
> IP:               195.46.95.14
> Country:          SK (Slovak Republic)
> Date:             2018-03-26 13:07:17
> Orders:           yes

 

Quote

¬as;Skener;Typ objektu;Objekt;Hrozba;Akcia;Pou§ˇvate–;Inform cie;Hash;Prvě věskyt
26.03.2018 18:29:43;HTTP filter;sŁbor;hxxp://static.auslogics.com/en/driver-updater/driver-updater-setup.exe;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;preruçen‚ spojenie;xxxx\xxxxxx.xxxxxx;Hrozba bola zachyten  pri prˇstupe na web aplik ciou: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (E5F54A2F3A004AF4C3CD24883B4F1CE38EE583D8).;428888B9141262FD6FEB323D60DD2D6B3DCFB0A2;
26.03.2018 18:30:26;Rezidentn  ochrana;sŁbor;C:\Program Files (x86)\Auslogics\BoostSpeed\is-1H5FR.tmp;variant infiltr cie Win32/Auslogics.B potenci lne nechcen  aplik cia;vylieźeně zmazanˇm;xxxx\xxxxxx.xxxxxx;T to udalosś bola zisten  na novom sŁbore, ktorě bol vytvoreně aplik ciou: C:\Users\jaroslav.huba\AppData\Local\Temp\is-7AOP8.tmp\boost-speed-setup.tmp (0857DA89DA6A5E699B00BDB31301FB96175CF07E).;8D7E4C23EED96B42570EE7BADE51B3933172CDDE;26.03.2018 18:30:03
26.03.2018 18:58:29;HTTP filter;sŁbor;hxxp://static.auslogics.com/en/driver-updater/driver-updater-setup.exe;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;preruçen‚ spojenie;xxxx\xxxxxx.xxxxxx;Hrozba bola zachyten  pri prˇstupe na web aplik ciou: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (E5F54A2F3A004AF4C3CD24883B4F1CE38EE583D8).;428888B9141262FD6FEB323D60DD2D6B3DCFB0A2;
26.03.2018 18:59:58;HTTP filter;sŁbor;hxxp://static.auslogics.com/en/driver-updater/driver-updater-setup.exe;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;;xxxx\xxxxxx.xxxxxx;Hrozba bola zachyten  pri prˇstupe na web aplik ciou: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (E5F54A2F3A004AF4C3CD24883B4F1CE38EE583D8).;428888B9141262FD6FEB323D60DD2D6B3DCFB0A2;
26.03.2018 19:01:05;Rezidentn  ochrana;sŁbor;C:\Users\XXXXXXXXXXX.XXXXXXX\AppData\Local\Temp\is-DD6TT.tmp\SetupCustom.dll;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;vylieźeně zmazanˇm;xxxx\xxxxxx.xxxxxx;T to udalosś bola zisten  na novom sŁbore, ktorě bol vytvoreně aplik ciou: C:\Users\jaroslav.huba\AppData\Local\Temp\is-CBVCL.tmp\driver-updater-setup.tmp (4052BB7AA2FC6DAAC1A27BAF1B92F7EF7BD80521).;2375F977FAC50994B3A63FF821279F4CDED37477;26.03.2018 18:28:47
26.03.2018 19:09:57;Rezidentn  ochrana;sŁbor;C:\Users\XXXXXXXXXXX.XXXXXXX\AppData\Local\Temp\is-QUIHB.tmp\SetupCustom.dll;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;;xxxx\xxxxxx.xxxxxx;T to udalosś bola zisten  na novom sŁbore, ktorě bol vytvoreně aplik ciou: C:\Users\jaroslav.huba\AppData\Local\Temp\is-ONEF4.tmp\driver-updater-setup.tmp (4052BB7AA2FC6DAAC1A27BAF1B92F7EF7BD80521).;2375F977FAC50994B3A63FF821279F4CDED37477;26.03.2018 18:28:47
26.03.2018 19:10:47;Rezidentn  ochrana;sŁbor;C:\Users\XXXXXXXXXXX.XXXXXXX\AppData\Local\Temp\is-S0UC9.tmp\SetupCustom.dll;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;;xxxx\xxxxxx.xxxxxx;T to udalosś bola zisten  na novom sŁbore, ktorě bol vytvoreně aplik ciou: C:\Users\jaroslav.huba\AppData\Local\Temp\is-LG6JB.tmp\driver-updater-setup.tmp (4052BB7AA2FC6DAAC1A27BAF1B92F7EF7BD80521).;2375F977FAC50994B3A63FF821279F4CDED37477;26.03.2018 18:28:47
26.03.2018 19:11:11;Rezidentn  ochrana;sŁbor;C:\Users\XXXXXXXXXXX.XXXXXXX\AppData\Local\Temp\is-V3UFU.tmp\SetupCustom.dll;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;;xxxx\xxxxxx.xxxxxx;T to udalosś bola zisten  na novom sŁbore, ktorě bol vytvoreně aplik ciou: C:\Users\jaroslav.huba\AppData\Local\Temp\is-QC6DR.tmp\driver-updater-setup.tmp (4052BB7AA2FC6DAAC1A27BAF1B92F7EF7BD80521).;2375F977FAC50994B3A63FF821279F4CDED37477;26.03.2018 18:28:47
26.03.2018 19:11:32;Rezidentn  ochrana;sŁbor;C:\Users\XXXXXXXXXXX.XXXXXXX\AppData\Local\Temp\is-VQOT3.tmp\SetupCustom.dll;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;;xxxx\xxxxxx.xxxxxx;T to udalosś bola zisten  na novom sŁbore, ktorě bol vytvoreně aplik ciou: C:\Users\jaroslav.huba\AppData\Local\Temp\is-LQ8UA.tmp\driver-updater-setup.tmp (4052BB7AA2FC6DAAC1A27BAF1B92F7EF7BD80521).;2375F977FAC50994B3A63FF821279F4CDED37477;26.03.2018 18:28:47
26.03.2018 19:14:03;HTTP filter;sŁbor;hxxp://static.auslogics.com/en/driver-updater/driver-updater-setup.exe;variant infiltr cie Win32/Auslogics.K potenci lne nechcen  aplik cia;;xxxx\xxxxxx.xxxxxx;Hrozba bola zachyten  pri prˇstupe na web aplik ciou: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (E5F54A2F3A004AF4C3CD24883B4F1CE38EE583D8).;428888B9141262FD6FEB323D60DD2D6B3DCFB0A2;
 

 

 

 

Edited March 28, 2018 by yardstudio

[Marcos 5,074]

The detection is correct. Potentially unwanted applications are not malware. As per the description at https://support.eset.com/kb2629/: A potentially unwanted application (PUA) is a program that contains adware, installs toolbars or has other unclear objectives. There are some situations where a user may feel that the benefits of a potentially unwanted application outweigh the risks.

PUA detection is not enabled by default and user's interaction is required when a PUA is detected.

Last but not least, I'd like to emphasize that this forum is not a channel for disputing PUA detections.  The only supported channel is via samples[at]eset.com where PUA vendors can contact us.

[yardstudio 0]

Yes, I know this is not malicious software, but I do not know where I can find what "Auslogics.K" means or "Auslogics.B" and what they are doing exactly was marked as "unwanted"

[itman 1,659]

Many other AV vendors detect Auslogics software as PUA's; just Google on that subject.

For example, a Symantec detection for its Boostspeed module yields:

Quote

The program scans the computer for junk files, junk registry entries, internet speed, computer speed, and privacy issues. The program exaggerates the impact of these issues and asks the user to pay to resolve them. 

 https://www.symantec.com/security_response/writeup.jsp?docid=2016-060110-4426-99&tabid=2    

Edited March 28, 2018 by itman