Antiviruses Keep Flagging Supermium as malware.

[ExiledCourtney94]

Hello just figured I would let you know that anti viruses keep flagging supermium as malware.

Virus total
https://www.reddit.com/r/windows7/comments/1b5ej7z/is_supermium_safe/

This person said comodo anti virus flaged supermium since it was making unusual IP address pings so no idea what was going on there.
https://www.reddit.com/r/windows7/comments/1awpn0j/supremium_migration_from_brave_ff_pops_up_odd/

Than just recently I installed malwarebytes & malwarebytes is flagging supermium's firewall access as malware. I had to manually look in the registry to find out what malwarebytes was flagging.

Which was this Adware.Ghokswa.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{B3E6F332-3127-46DA-9F0A-AFCAA7DE2A51}

So I went to where malwarebytes said there was a virus. I opened up the registry than I saw this

c=Inbound rule for Chromium to allow mDNS traffic.|EmbedCtxt=Supermium|

so immediately knew it definitely wasn't malware:

So I told malwarebytes to ignore it but I am just wondering if there's anything you can do on your end? To get antiviruses to read or register supermium as safe?

[Blaukovitch]

So I told malwarebytes to ignore it but I am just wondering if there's anything you can do on your end? To get antiviruses to read or register supermium as safe?

For antivirus companies, this issue is solved by digital signatures (cert) for PE COFF files.
Or the author should write to the antivirus companies themselves to include his software in a package of testing for false positives - such testing is always done when antivirus updates are released.

[win32ss]

Supermium 122 appears to be in a good state as no vendors appear to be tagging the 122 executables and binaries.

[Marek33]

Supermium 122 appears to be in a good state as no vendors appear to be tagging the 122 executables and binaries.

I don't want to be the bearer of bad news, but the Norton Power Eraser says that multiple things are viruses. At least the Roguekiller, and Malwarebytes (the older version) do not report it.

[Anton-V-K]

Supermium 122 appears to be in a good state as no vendors appear to be tagging the 122 executables and binaries.

Well, Supermium 122.0.6261.152 (R6) is still flagged by some engines at VirusTotal:

• supermium_122_64_setup.exe - 2/68 (which is OK)
• supermium_122_32_setup.exe - 10/67 (which doesn't look good), its setup.exe is 23/69 (OMG!) and uninstall.exe is 19/72

[Anton-V-K]

With 124.0.6367.245 the situation became even worse for 32-bit on VirusTotal - 18/63 false detections for supermium_124_32_setup.exe, no change for supermium_124_64_setup.exe (2/69).
Now even BitDefender raises an alarm, which is a bad sign.
Some AV engines may be referencing each other when detecting malware, so this spiral won't go away on its own :(

[AroKol78]

For the first time today, Avira (installed) marked it as a trojan TR/Redcap.qnssu.
I don't know if it's false or true, but do something about it.