Defraggler Malware or not?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Defraggler Download Defraggler for free | Defrag SSD and HDD drives downloading it opens CIS with the option of cleaning the file via sending it to the sandbox or running it without. ApplicUnwnt[at]#290od3alopvy2 Database version 28059.

2

Hi patrice58,

Thank you for reporting this.
We’ll check it and get back to you soon.

SHA1：40cdd1188cfc0b474b66a22ce8ddb280a38eadfd *dfsetup221.exe

Best regards
Qiuhui.■■■■

3

I do not want to anticipate anyone , but In my opinion , the assessment of Comodo is justified .

The Defraggler Installer spawns the same “Google-Spy-Software” as the normal CCleaner Installer . So for me it´s an Unwanted Application !!!

I recommend to use the portable version >>> Builds

Spawned process “GoogleUpdateSetup_1.3.21.169.exe” with commandline "/silent /install “appguid={F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}&appname=Google%20Toolbar&needsadmin=True&brand=PRFD&usagestats=0” /appargs “appguid={F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}&installerdata=d%3Dask%26h%3Dask2"”
Spawned process “GoogleUpdate.exe” with commandline "/silent /install “appguid={F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}&appname=Google%20Toolbar&needsadmin=True&brand=PRFD&usagestats=0” /appargs “appguid={F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}&installerdata=d%3Dask%26h%3Dask2"”
Spawned process “GoogleUpdate.exe” with commandline “/regsvc”
Spawned process “GoogleUpdate.exe” with commandline “/regserver”

A good explanation for this topic from “greyghost” :

"Piriform “Defraggler” is openly packaged with GoogleToolbar, offerring to install Google Chrome as your default Browser.
- Google Toolbar is a pest (if you don’t want it) … the threat reported by ESet is not a false-positive

  • but IMO nor is Defraggler sneakware nor is Google Toolbar a threat, it is for some a pest.
    [b]During installation the install Wizard clearly displays an opt out ( a very colorful window, leaving no doubt that they are offering Google Chrome)
  • unchecking the offer is not rocket science .[/b] ( Short objection from me ) : >>> " Only If you know exactly what to choose or not ! " :wink:

Rushing to the VirusTotal bad vote is paranoid and naive reaction

  • do your homework about the reported “threat” with any search engine, I chose to use independant https://duckduckgo.com/
  • I have installed and unstalled “Defraggler” installer twice in the last 30 minutes, I opted out of the google offering … no problems, the sky has not fallen in.

[b]If you still dont trust Defraggler installer there is also the portable version at https://www.piriform.com/defraggler/builds[/b]

Piriform (developers of Defraggler) are not a charity, so you are getting a first class program for FREE,

  • if Piriform make money from encouraging us to install Google Toolbar, good luck to them
  • my choice is, (and yours might be) to avoid Google phoning home….
  • if you are smart enough to be here on VirusTotal, you should be smart enough to learn how to research any program and recognise Piriform’s need to finance FREE “Defraggler” and some of the other free apps they provide."

So as I’ve often said , sometimes it’s just a question of definite .

4

Hi patrice58,

This is to inform you that the reported file is not a false positive.
If you intent to use it further,you can add it to exclusion list.

SHA1：40cdd1188cfc0b474b66a22ce8ddb280a38eadfd *dfsetup221.exe

Best regards
Qiuhui.■■■■

5

:-TU :-TU :-TU :wink:

6

After all the madness I excluded the program. (Which reminds me why is the option to check/delete exclusions, not in the AV section of the firewall, why is it is the weirdly named advanced protection section.) After doing all that and downloading it, I then remembered that I can’t use it as I have an SSD. Ah well.

7

Is not that bad , but good that we have talked about it here ! :wink:

8

Definitely thanks ever so much for your help. :slight_smile: