CC Annuals detected as malware (adware). False positive?

ronnke · November 2017

A recent scan of my PC detected 3 of the CC annuals as Adware (specifically Adware.MultiPlug.TskLnk). I'm assuming this is a false positive, but I'm posting here just in case it's not.

Here is the log file of the hits.

Registry Key: 6
Adware.MultiPlug.TskLnk, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CA109 Here Be Monsters, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AA483DE6-6EC8-48BD-8F01-101E6D8D53FA}, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CA110 Empire of the Sun, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{03876C4F-1279-42EE-948A-F14622013B11}, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CA119 Realms of Legend, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B7CCAFB0-7966-4F01-B618-6159CD58763E}, No Action By User, [16383], [456307],1.0.3222

File: 24
Adware.MultiPlug.TskLnk, C:\PROGRAMDATA\{67FF0EFE-B873-42F8-8575-603A0F763498}\CA109_HereBeMonsters.exe, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\CA109_HereBeMonsters.dat, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\CA109_HereBeMonsters.lnk, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\CA109_HereBeMonsters.msi, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\CA109_HereBeMonsters.par, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\CA109_HereBeMonsters.res, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\instance.dat, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{67FF0EFE-B873-42F8-8575-603A0F763498}\mia.lib, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\PROGRAMDATA\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\CA110_EmpireOfTheSun.exe, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\CA110_EmpireOfTheSun.dat, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\CA110_EmpireOfTheSun.lnk, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\CA110_EmpireOfTheSun.msi, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\CA110_EmpireOfTheSun.par, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\CA110_EmpireOfTheSun.res, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\instance.dat, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{77F0F219-7DE6-407B-B5FC-9B2095404A42}\mia.lib, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\PROGRAMDATA\{EF246583-8D90-4949-BEDD-A145118C3536}\CA119_RealmsOfLegend.exe, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\CA119_RealmsOfLegend.dat, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\CA119_RealmsOfLegend.lnk, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\CA119_RealmsOfLegend.msi, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\CA119_RealmsOfLegend.par, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\CA119_RealmsOfLegend.res, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\instance.dat, No Action By User, [16383], [456307],1.0.3222
Adware.MultiPlug.TskLnk, C:\ProgramData\{EF246583-8D90-4949-BEDD-A145118C3536}\mia.lib, No Action By User, [16383], [456307],1.0.3222

Monsen · November 2017

Those are false positives. Those files in the "hit list" are just the installer cache for those annuals. If there by some chance had been adware in the installers (which to my best knowledge, there is not), it would have appeared other places on your system, and not only in the installer cache.

JimP · November 2017

I have to put my firewal/antivirus on hold to install ianything, including CC3/CC3Plus. I agree, its a alse positive.

ProFantasy Community Forum

CC Annuals detected as malware (adware). False positive?

Comments