Troubleshooting Bullguard prevents pCloud form installing properly

[Pearl96]

Hello! Yesterday I tried installing pCloud windows client but the install keeps failing as Bullguard quarantines a file during the installation process! The screenshot is in the attached. Thank you in advance.

 

[Xsjx]

Hello! Yesterday I tried installing pCloud windows client but the install keeps failing as Bullguard quarantines a file during the installation process! The screenshot is in the attached. Thank you in advance.

If u cant get help here you can ask Bullguard support live chat 24/7
But cant you add it to exclusive?

 

[Pearl96]

If u cant get help here you can ask Bullguard support live chat 24/7
But cant you add it to exclusive?

I have already talked to Bullguard support team and they asked to add the file to exclusions but I am afraid to do so as Bullguard states the risk is high. I have reported the file as false positive many times but Bullguard still detects it.

 

[Xsjx]

I have already talked to Bullguard support team and they asked to add the file to exclusions but I am afraid to do so as Bullguard states the risk is high. I have reported the file as false positive many times but Bullguard still detects it.

Send the file to Virustotal then look if other avs block it also if it is its probaly malcious );

 

[Pearl96]

Send the file to Virustotal then look if other avs block it also if it is its probaly malcious );

Thank you for the suggestion I hope it is not as I do need pCloud to be installed hahahahah

 

[Xsjx]

Thank you for the suggestion I hope it is not as I do need pCloud to be installed hahahahah

Hmm i hope it too that it isnt malcious also pls provide a link from virustotal result

 

[Pearl96]

Malware scan of cbfsinstall.exe 85af874da57cc01c8a152188edde7426b316ffc1 - Reason Core Security Labs

 

[Xsjx]

Malware scan of cbfsinstall.exe 85af874da57cc01c8a152188edde7426b316ffc1 - Reason Core Security Labs

VirusTotal - Free Online Virus, Malware and URL Scanner
Has better results pls show that to decide if its malcious or not

 

[Pearl96]

VirusTotal - Free Online Virus, Malware and URL Scanner
Has better results pls show that to decide if its malcious or not

The problem I can't find the file to upload to virustotal hahahah any suggestions on how to find the file as I did not find it in Bullguard's quarantine

 

[Xsjx]

The problem I can't find the file to upload to virustotal hahahah any suggestions on how to find the file as I did not find it in Bullguard's quarantine

In downloads Folder?

 

[Pearl96]

In downloads Folder?

The file is installed by the pcloud.exe as you can see in the screenshot," the file cbfsinstall.exe attempted to
modify the Windows System directory. The file C:\WINDOWS\SYSTEM32\ELEVTMSG.DLL was created by this process."

Behaviour : The program cbfsinstall.exe attempted to modify a registry setting used for launching programs upon startup (\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELLSERVICEOBJECTDELAYLOAD).

What I have noticed while installing pCloud client is the message the required my input to install the (
Common DLL used by EldoS components driver ).

Is uploading the main installer make any good ?

 

[Xsjx]

The file is installed by the pcloud.exe as you can see in the screenshot," the file cbfsinstall.exe attempted to
modify the Windows System directory. The file C:\WINDOWS\SYSTEM32\ELEVTMSG.DLL was created by this process."

Behaviour : The program cbfsinstall.exe attempted to modify a registry setting used for launching programs upon startup (\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELLSERVICEOBJECTDELAYLOAD).

What I have noticed while installing pCloud client is the message the required my input to install the (
Common DLL used by EldoS components driver ).

Is uploading the main installer make any good ?

Yes

 

[Pearl96]

Yes

Antivirus scan for e9675ad0fa8d6ad6333de4d11d587823d26f7bc6ec4dc79388960680993fca21 at 2017-03-02 20:50:29 UTC - VirusTotal

Thank you very much for paying much attention to my issue

 

[Xsjx]

Antivirus scan for e9675ad0fa8d6ad6333de4d11d587823d26f7bc6ec4dc79388960680993fca21 at 2017-03-02 20:50:29 UTC - VirusTotal

Thank you very much for paying much attention to my issue

No problem! And as you can see its safe

 

[Pearl96]

No problem! And as you can see its safe

Thank you Not it is Bullguard's team job! I have reported the file as false positive and they ought to fix the problem! Thank you again (Y)

 

[Pearl96]

Antivirus scan for b8667f0015baf2e4e177156bcd260b77fd0fa7e60a74bd03e48141d0278d0bea at UTC - VirusTotal

The file cbfsinstall.exe is detected by an orphan solution called Invincea. I have sent an detailed email to Bullguard to fix the false-positive dectection thank you.

 

[Ink]

Enabling the Behavioural may increase FP, you should be able to adjust your Antivirus settings to explicity Allow, or from the Prompt.
BullGuard Desktop Protection Help - Antivirus Settings - BullGuard

• Temporary disable Bullguard.
• Install pCloud using a fresh copy from online.
• Add pCloud files/folders to Exclusion under BullGuard Tuning setting (see link above).

 

[Pearl96]

Enabling the Behavioural may increase FP, you should be able to adjust your Antivirus settings to explicity Allow, or from the Prompt.
BullGuard Desktop Protection Help - Antivirus Settings - BullGuard

• Temporary disable Bullguard.
• Install pCloud using a fresh copy from online.
• Add pCloud files/folders to Exclusion under BullGuard Tuning setting (see link above).

Thank you very much I am installing the fresh copy now

 

[Arequire]

@Pearl96 pCloud is completely harmless and well worth investing in if you're looking for a privacy focused cloud storage solution.

 

[Xsjx]

Thank you very much I am installing the fresh copy now

Does it all work now?