KerishDoctor.A potentially unwanted application
-
Thread starter
mojaveron
- Start date
- 40 Replies
- 11,949 Views
Share practical recommendations that address the author's needs.
ESET detects many such programs as PUA and PUA is not enabled by default.
If you want to keep using Kerish Doctor then you may create a detection exclusion for it in ESET which would make ESET not to detect anything with this signature.
If you want to keep using Kerish Doctor then you may create a detection exclusion for it in ESET which would make ESET not to detect anything with this signature.
Did you download Kerish from the official site? You can upload the .exe to VirusTotal.
VirusTotal
This is ESET's stand on PUAs.
help.eset.com
ESET will prob. not figure this as a false-positive so if you are comfortable with Kerish, tell ESET via the UI to exclude it from scanning.
VirusTotal
This is ESET's stand on PUAs.
Potentially unwanted applications | ESET Glossary
Grayware or Potentially Unwanted Application (PUA) is a broad software category whose intent is not as unequivocally malicious as with other types of malware, such as viruses...
ESET will prob. not figure this as a false-positive so if you are comfortable with Kerish, tell ESET via the UI to exclude it from scanning.
WOW I had the same popup this morning, although my Kerish file was in compressed .rar file on e:\\ miscellaneous storage drive. something to do with a variant of win32. I didn't need .rar so I wiped it. Curious that ESET scanned it, unless it automatically scanned all the ssd overnight.
I've never really got on with Kerish Doctor. I've downloaded it a few times when I've seen it offered for free and a couple of times at least my AV at the time (probably F-Secure SAFE/Emsisoft AM, sorry I can't remember which) its been flagged as suspicious so I've just got rid of it. There seems to be a history of AVs not trusting Kerish Doctor. Perhaps someone else here can add more detail.
Unless there was recent change in Kerish Doctor. It’s most likely a false positive.
I kinda feel that some vendors don’t actually bother to accurate detect all the time if a sample is malicious or “potentially” unsafe
Btw, roger made detailed post about the product
Eset
I just received a warning from ESET Smart Security Premium - C:\Program Files (x86)\Kerish Doctor\kerishdoctor.exe - a variant of Win32/KerishDoctor.A...
www.wilderssecurity.com
Setup PC setup
Emsisoft enterprise quarantines KerishDoctor yesterday calling it Bad Reputation too
Gandalf_The_Grey
Level 86
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Forum Veteran
Contact Eset and/or Emsisoft support is the best thing you can do.
And I hope that the ones that do keep us informed.
And I hope that the ones that do keep us informed.
I have contacted Kerish Doctor again and provided them with the information regarding the alerts I received from Emsisoft. I will post their reply here when I get it.
Guys don't overthink it and no need to to contact support over this.
Firstly, this is not a false positive. Just look at the detection name. ESET now considers Kerish Doctor as a PUA. ESET adds PUA detection for many such apps and they won't remove this detection. The creation of this kind of exact detection is a concise choice from them.
I have a portable version of a downloader named, EagleGet which I use on rare occasions. ESET suddenly added a similar named PUA detection for it in the middle of last year. Since I use it, I created a signature exclusion for it in my ESET. Now ESET would never detect any EagleGet files with this exact EagleGet signature on my system. I trust this app so it's safe.
The case of Kerish Doctor is the same. ESET has now created a PUA detection for it, as they did in the past for IOBIT, AusLogics, Microsoft Bing Wallpaper, Avast installer, uTorrent, etc many other apps. It's normal for them. Nothing to be panicked/surprised about it. If you trust it, and want to use it then create an exclusion. ESET gives you the option of many types of exclusions like file based, folder based, signature based and hash based.
Firstly, this is not a false positive. Just look at the detection name. ESET now considers Kerish Doctor as a PUA. ESET adds PUA detection for many such apps and they won't remove this detection. The creation of this kind of exact detection is a concise choice from them.
I have a portable version of a downloader named, EagleGet which I use on rare occasions. ESET suddenly added a similar named PUA detection for it in the middle of last year. Since I use it, I created a signature exclusion for it in my ESET. Now ESET would never detect any EagleGet files with this exact EagleGet signature on my system. I trust this app so it's safe.
The case of Kerish Doctor is the same. ESET has now created a PUA detection for it, as they did in the past for IOBIT, AusLogics, Microsoft Bing Wallpaper, Avast installer, uTorrent, etc many other apps. It's normal for them. Nothing to be panicked/surprised about it. If you trust it, and want to use it then create an exclusion. ESET gives you the option of many types of exclusions like file based, folder based, signature based and hash based.
According to the link you provided, Kerish is detected as PUP for the following reasons.A possible reason was given here
Eset
I just received a warning from ESET Smart Security Premium - C:\Program Files (x86)\Kerish Doctor\kerishdoctor.exe - a variant of Win32/KerishDoctor.A...
While I agree with what is mentioned above, Kerish Doctor does provide users with useful stuff such as the driver updater (which I personally use). At the end, it is up to the user to decide whether they need it or not.
Setup PC setup
Malwarebyte detect KerishDoctor as potentially unwanted now!
Shadowra
Level 42
Verified
Top Poster
Content Creator
Malware Tester
Well-known
High Reputation
Forum Veteran
Yep... on my 2nd pc I had the surprise...
I don't know what to think about it, although I like Kerish Doctor... maybe because it goes too deep, the antivirus don't like it
Shadowra
Level 42
Verified
Top Poster
Content Creator
Malware Tester
Well-known
High Reputation
Forum Veteran
F-Secure also works on my mother's PC. (detection coming from Avira)
And the last VT is not glorious... (Panda Dome, Fortinet, Symantec / Norton & co)
And the last VT is not glorious... (Panda Dome, Fortinet, Symantec / Norton & co)
Hello, we are Kerish Products - system software developer.
Due to the incident, we would like to make an official statement.
First of all, we want to say that we are unpleasantly surprised by the false detection of our Kerish Doctor product as potentially unwanted software.
We have been developing our Kerish Doctor product for 18 years since 2005. Kerish Doctor is a classic Shareware product. Our product has a trial period of work and free of charge services the computer within 15 days. After that, if the user is satisfied with the work of the program and wants to continue working with it, then he has the right to buy a license key and use it to activate the program for further work.
Over the past 18 years, our product has been doing the following:
On January 19, appesteem_com site suddenly published a series of claims about our product.
Based on this information, several antiviruses began to falsely detect our software as potentially unwanted application.
This causes the application to stop working for thousands users of Kerish Doctor.
In fact, this antiviruses is permanently removing the ability to use our software for all of our users who have the misfortune of having both of these products on a PC.
In addition, we have an unfair blow to our reputation.
We have already solved all the claims of site appesteem_com, although we do not agree with them.
We also contacted them and provided evidence of the correction of their claims.
We hope that all unfair accusations of our product will be removed as soon as possible.
We are ready to provide any support that will help resolve this conflict.
We are ready to answer any questions about the operation and functioning of our product.
Due to the incident, we would like to make an official statement.
First of all, we want to say that we are unpleasantly surprised by the false detection of our Kerish Doctor product as potentially unwanted software.
We have been developing our Kerish Doctor product for 18 years since 2005. Kerish Doctor is a classic Shareware product. Our product has a trial period of work and free of charge services the computer within 15 days. After that, if the user is satisfied with the work of the program and wants to continue working with it, then he has the right to buy a license key and use it to activate the program for further work.
Over the past 18 years, our product has been doing the following:
- Defragments HDD drives when the computer is idle.
- Monitors the temperature of PC devices as well as S.M.A.R.T disk information
- Updates device drivers and software to the latest version from our server (monthly updated driver database)
- Removes remnants of uninstalled apps if present
- Cleans PC from junk (like CCleaner)
- Protects PC from malware (daily updated threat database)
- Fixes corrupt entries in the system registry
- File recovery on NTFS
On January 19, appesteem_com site suddenly published a series of claims about our product.
Based on this information, several antiviruses began to falsely detect our software as potentially unwanted application.
This causes the application to stop working for thousands users of Kerish Doctor.
In fact, this antiviruses is permanently removing the ability to use our software for all of our users who have the misfortune of having both of these products on a PC.
In addition, we have an unfair blow to our reputation.
We have already solved all the claims of site appesteem_com, although we do not agree with them.
We also contacted them and provided evidence of the correction of their claims.
We hope that all unfair accusations of our product will be removed as soon as possible.
We are ready to provide any support that will help resolve this conflict.
We are ready to answer any questions about the operation and functioning of our product.
Shadowra
Level 42
Verified
Top Poster
Content Creator
Malware Tester
Well-known
High Reputation
Forum Veteran
Hello @KerishProducts 
It's not because you use Deceptor ?
Some AV like Cyren detect this in your software :/
It's not because you use Deceptor ?
Some AV like Cyren detect this in your software :/
Good choice.
All software cleaners that advertise absurb claims are scams. Having stopped using them since 2015, my systems have been more stable than ever.
Registry Cleaners: Digital Snake Oil | Malwarebytes Labs
A word on registry cleaners.One of the most common complaints we see on our forums, and from our users, concerns a particular category...
www.malwarebytes.com
CCleaner claims to:
Kerish Doctor claims to:
If you want a more faster and powerful PC, you will need to upgrade the physical hardware or components to the latest technology standards. Software cannot do that.
Use your search engine and type in the products names, and see what is promoted as their description. Most claim to speed up you PC.
Recently browsing
Members who viewed this thread in the last 5 minutes
You may also like...
-
-
Advanced Plus Security enaph's PC Security Config -
-
-