GameBooster 1.5 systray

[w33d3r]

Hi just had mbam recognised the systray for this utility.....

http://download.cnet.com/Game-Booster/3000...4-10913645.html

as malware, previously not found by mbam

I have un-installed and cleaned out the offending article.

This utility is getting very popular in gaming circles, but considering what it does if the systray is malware after it has shut down a load of essential services and your resident virus protection... it pretty much has free reign to do whatever it wants.

A newer version 1.51 has been released since I installed it (so not tested here, having just found the 1.5 version to be a potential threat I trust mbam more than this utility)

False positive or good find?

[nosirrah]

Update and check again, I believe this was already fixed.

[w33d3r]

Update and check again, I believe this was already fixed.

I did an update of mbam before the scan this morning, do you mean update the utility

mbam log....

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4401

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

07/08/2010 08:56:18

mbam-log-2010-08-07 (08-56-18).txt

Scan type: Full scan (C:\|D:\|)

Objects scanned: 250351

Time elapsed: 52 minute(s), 7 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files\IObit\Game Booster\gbtray.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

[w33d3r]

Apologies for the spoiler, noob forum user I think I should have used a code box instead of spoiler and cannot modify the post.

[w33d3r]

Maybe my question was not so clear - By "update the utility" I meant do you wish me to update gamebooster to the newer 1.51 version, or did you in fact mean update malwarebytes (which as noted above was updated prior to the scan finding the problem)

[agoni]

gbtray.exe , is still being detected like malware trace

[w33d3r]

gbtray.exe , is still being detected like malware trace

In which case I will not be re-installing any version of it, thank you. I guess the subject may be being looked into a bit more at the moment. Time will tell, and considering it could leave your system wide open for exploit best to avoid at the moment I think, it would not be the first time someone has gained user trust then by degrees introduced extra features.

[nosirrah]

Let me look at this, I had thought this was fixed in an update a few days ago.

[nosirrah]

When installing this and scanning with current MBAM I am not getting detection, please update and try again.

[w33d3r]

When installing this and scanning with current MBAM I am not getting detection, please update and try again.

Well, leap of faith, I went with the experienced knowledge and deferred my reservations.....

Downloaded v1.51 of Gamebooster (having previously deleted all trace of 1.5)

Checked the installer with MSSE and MBam, clear

Installed, did not allow to auto-run, checked installation folder with both above again...

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4404

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

07/08/2010 22:12:09
mbam-log-2010-08-07 (22-12-09).txt

Scan type: Quick scan
Objects scanned: 54
Time elapsed: 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

So it seems it was a false positive - Well at least I got one thing right, the forum area

Thanks nosirrah, faith restored in gamebooster.

[w33d3r]

Hmm, code boxes dont expand/collapse either, oh well.