Malware detected after installing Pharos Popups
- 18 Mar 2024
- 1 Minute to read
- Print
- DarkLight
- PDF
Malware detected after installing Pharos Popups
- Updated on 18 Mar 2024
- 1 Minute to read
- Print
- DarkLight
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Why does Windows Defender (formerly Microsoft Antispyware) detect malware after installing the Pharos Popup Client?
Windows Defender (formerly Microsoft AntiSpyware) reports a file used by the Pharos Popup Client as the Rivarts.A trojan.
The registry key:
HKLM\System\CurrentControlSet\Services\mchInjDrv
Has been detected as malware by Defender.
Microsoft is aware of this problem. Other third party applications use the same hook. So far, however, Microsoft has not whitelisted the application, madCodeHook by Madshi.
Madshi, the developers of madCodeHook (the file in question) is also aware of this issue.
For more information on Madshi, and madCodeHook see: http://www.madshi.net
This is a required file needed for the Pharos Popup Client to function and does not pose a threat to the system.
Was this article helpful?