PUP.optional.adpeak

Malwarebytes has just picked up 2 of these with a new definition file update.
It's pointing to Topaz Remask 5 uninstaller uninst.exe and a corresponding registry key. Topaz is paid photo processing software used widely by photographers. Remask 5 was downloaded from the Topaz Labs site.

So what do you think the best action is?

The only things I can think of is going to the Malwarebytes forum and checking if it is a false positive. Then checking with Topaz see if the problem has been reported to them.

I can't find anything. I've notified Topaz Labs technical support.

Update:
Topaz got back quickly and claim it is a false positive.

Hi, @mjf:

To reiterate and expand a bit on what the others have suggested....

MBAM specializes in detecting PUPs.

If MBAM is detecting as a PUP/malware what you think are legitimate files, then I suggest the following:

1. First please read this forum sticky for F/P posting instructions: Please read before reporting a false positive
2. Then, please post the requested information (e.g. an MBAM scan log, a zipped version of the file in question, a virustotal report) in the malware F/P section here: File Detections - False Positives

The Research Team will review your data and advise you about whether or not the detection might be a False Positive; they will correct the database accordingly, if needed.


Thanks,
MM

Uninstallers sometimes launch a browser when the uninstall is finished. I suppose that MBAM might detect that uninstaller as directing your browser to a web page that it doesn't like.

(Only guessing)

If directs me anywhere then I would suspect it would be to the Topaz Labs homepage. Topaz have been around awhile and considered highly reputable.

MoxieMomma said:

Hi, @mjf:

To reiterate and expand a bit on what the others have suggested....

MBAM specializes in detecting PUPs.

If MBAM is detecting as a PUP/malware what you think are legitimate files, then I suggest the following:

1. First please read this forum sticky for F/P posting instructions: Please read before reporting a false positive
2. Then, please post the requested information (e.g. an MBAM scan log, a zipped version of the file in question, a virustotal report) in the malware F/P section here: File Detections - False Positives

The Research Team will review your data and advise you about whether or not the detection might be a False Positive; they will correct the database accordingly, if needed.


Thanks,
MM

I'd prefer to contact the software company and they can jump through these hoops.

mjf said:

I'd prefer to contact the software company and they can jump through these hoops.

Well, that's certainly up to you.

It would take only a few moments to report the possible F/P at the MBAM forum.
It's not really "hoops" -- an MBAM scan log would probably suffice for the Research Team, especially if they can obtain a copy of the exe file in question.
And, if your post is picked up shortly thereafter, the F/P (if that is the case) could be fixed within minutes or an hour or so, with the next database update.
That's usually the most expedient and efficient way to report possible F/Ps.
(If it's NOT a False Positive, then you would get a reply to that effect in a similar time frame.)
Working through the vendors may take considerably longer, especially over a weekend.

But again, it's up to you.

Cheers,

MM