PUA: Win32/Pearfoos.A!ml in ioq3v6-intel.exe

[imprecise]

Hi Adminless

I have a problem, I just saw that Windows Defender detected a potentially unwanted application in me when I had just quit UnFreeZe ... I have windows 10 version 20h2

Detected: PUA: Win32/Pearfoos.A!ml

affected item: C:\ioq3v6-unfreeze-client-v20.5a\ioq3v6-intel.exe

the possible actions are: Delete / Quarantine / Authorize on the device

is it normal that Defender detects this ? What should I do ?

thank you in advance

Capture.PNG

[alyeti]

This is adware tho , perhaps not client and you have done something else to put it in ?

[imprecise]

@alyeti yes I know that it is an adware of which I do not know the dangerousness and the characteristics, and no I did not do absolutely nothing it came like that suddenly and for no apparent reason, hence my surprise !!!

[adminless]

that's a false positive, try updating the windows defender database.

[imprecise]

@Adminless Windows Defender database is already up to date

[imprecise]

PUA: Win32/Pearfoos.A!ml removed by Defender

I just re-downloaded ioq3v6-unfreeze-client-v20.5a.zip I replaced ioq3v6-intel.exe then scan with Defender and no more PUA detected

thank you for your help

[adminless]

ok that's great then, I'm glad you sorted it out soon and thanks for get back with the "solution" (apparently re-download and re-install from the site, good to know).

[imprecise]

hi Adminless

Windows Defender has detected me again Win32/Pearfoos.A!ml when closing ioq3v6-intel.exe (version 20.5a) and Windows Defender has apparently solved the problem by deleting the ioq3v6-intel.exe file and no longer finds a threat

I re-downloaded ioq3v6-unfreeze-client-v20.5a.zip and I took the ioq3v6-intel.exe from the package that I put back in place of the one that windows defender removed

I analyzed the new ioq3v6-intel.exe with windows defender, it does not find anything

[imprecise]

hi Adminless

Windows Defender has detected me again Win32/Pearfoos.A!ml when closing ioq3v6-intel.exe (version 20.5a) and Windows Defender has apparently solved the problem by deleting the ioq3v6-intel.exe file and no longer finds a threat

I re-downloaded ioq3v6-unfreeze-client-v20.5a.zip and I took the ioq3v6-intel.exe from the package that I put back in place of the one that windows defender removed

I analyzed the new ioq3v6-intel.exe with windows defender, it does not find anything

[adminless]

ok, good to know, thanks for the info. as I said antivirus solutions can be a little tricky and led to false positives specially when it comes to max settings generic Potentially Unwanted Applications (and similar rather than actual real infections) detection. very likely from what you're describing the engine probably generate some traffic and/or some memory pattern/access at some point of use that windows defender misidentifies as potentially unwanted/unusual/"unexpected" and problem is likely simply aggravated because of the fact of almost legacy/phased out software by today standards.

[alyeti]

ok, good to know, thanks for the info. as I said antivirus solutions can be a little tricky and led to false positives specially when it comes to max settings generic Potentially Unwanted Applications (and similar rather than actual real infections) detection. very likely from what you're describing the engine probably generate some traffic and/or some memory pattern/access at some point of use that windows defender misidentifies as potentially unwanted/unusual/"unexpected" and problem is likely simply aggravated because of the fact of almost legacy/phased out software by today standards.

However only affects imprecise , I would say problem on that device .... Maybe

[imprecise]

alyeti wrote

"However only affects imprecise, I would say problem on that device .... Maybe"

@yeti this is what I also said to myself but Malwarebytes does not detect anything and windows defender only occasionally detects it when I use ioq3v6-intel.exe no other application triggers this ...

[alyeti]

alyeti wrote

"However only affects imprecise, I would say problem on that device .... Maybe"

@yeti this is what I also said to myself but Malwarebytes does not detect anything and windows defender only occasionally detects it when I use ioq3v6-intel.exe no other application triggers this ...

Uninstall malwarebytes ?