GHOST SPECTRE


Before I leave the G-S community, here is what Malware bytes picked up:
View attachment 179775
The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2 ;-)
How can policies made by MS be detected as threats?
The first and third .reg entries disables any Windows Update via MS Update while the 2nd disables task manager.

"The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)"
Just to show you that Malwarebytes is a bit overzealous on its detection of so-called threats.

The others are user induced as I don't have them on my test system.


In truth I have long uninstalled Malwarebytes as too many false positive flagging was happening.
It used to be excellent and truthful though so I don't know what happened there.
 

My Computers My Computers

  • At a glance

    All Branches but ReleaseAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Release
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender
  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
How can policies made by MS be detected as threats?
The first and third .reg entries disables any Windows Update via MS Update while the 2nd disables task manager.

"The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)"
Just to show you that Malwarebytes is a bit overzealous on its detection of so-called threats.

The others are user induced as I don't have them on my test system.
I have not have the opportunity to dig in to it (install a VM) so i cant say much.. what i did find interesting was the infatica_agent.exe
Did you test G-S too and did you find that file?
 

My Computers My Computers

  • At a glance

    Linux: Debian, Kali-linux, Alma, Win:7,10IoT,...i3, i5 and i7 From 2gen to 9th gen... Server ...
    OS
    Linux: Debian, Kali-linux, Alma, Win:7,10IoT,2012R
    Manufacturer/Model
    HP Elitebook 840, AsusX53, Aspire E1-572. AsusUX32A, HP Pro3130mt+3010mt, HP Proliant ML150, 3xCustom-PC, i3, i5, i7
    CPU
    i3, i5 and i7 From 2gen to 9th gen... Server dual Xenon
    Hard Drives
    Sata, M.2, SAS
  • At a glance

    Retro: 2003server.XPpro, Win2000, Win98SE, Wi...Oldest intel 8088 up to P4 dual core
    Operating System
    Retro: 2003server.XPpro, Win2000, Win98SE, Win95, Win3.11, MS-DOS, IBM-DOS
    Manufacturer/Model
    Commodore, AST, Fujitsu, Compaq, etc etc. etc Around 15 desktops and 20 laptops in the collection
    CPU
    Oldest intel 8088 up to P4 dual core
    Hard Drives
    MFM, IDE, SCSI
I have not have the opportunity to dig in to it (install a VM) so i cant say much.. what i did find interesting was the infatica_agent.exe
Did you test G-S too and did you find that file?
1.webp
Don't have that file which is usually within some codec packs. (K-Lite Mega Codec Pack)
The process list also indicates nothing of concern for now but the test is on going as I am monitoring network activity.
All tools used for testing are within the WSCC suite.
 

Attachments

Last edited:

My Computers My Computers

  • At a glance

    All Branches but ReleaseAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Release
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender
  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
Don't have that file which is usually within some codec packs. (K-Lite Mega Codec Pack)
I wonder what K-light.. i running that on my Win7 computer i have to my TV and home cinema system.. and i dont have that one.
But Jajk did install a nav maps software.. perhaps it followed that one. :think: I have Asus and Asus don't install proxy/residential bandwidth-sharing software with their products as far i know. *lol* 😅
 

My Computers My Computers

  • At a glance

    Linux: Debian, Kali-linux, Alma, Win:7,10IoT,...i3, i5 and i7 From 2gen to 9th gen... Server ...
    OS
    Linux: Debian, Kali-linux, Alma, Win:7,10IoT,2012R
    Manufacturer/Model
    HP Elitebook 840, AsusX53, Aspire E1-572. AsusUX32A, HP Pro3130mt+3010mt, HP Proliant ML150, 3xCustom-PC, i3, i5, i7
    CPU
    i3, i5 and i7 From 2gen to 9th gen... Server dual Xenon
    Hard Drives
    Sata, M.2, SAS
  • At a glance

    Retro: 2003server.XPpro, Win2000, Win98SE, Wi...Oldest intel 8088 up to P4 dual core
    Operating System
    Retro: 2003server.XPpro, Win2000, Win98SE, Win95, Win3.11, MS-DOS, IBM-DOS
    Manufacturer/Model
    Commodore, AST, Fujitsu, Compaq, etc etc. etc Around 15 desktops and 20 laptops in the collection
    CPU
    Oldest intel 8088 up to P4 dual core
    Hard Drives
    MFM, IDE, SCSI
Before I leave the G-S community, here is what Malware bytes picked up:
View attachment 179775
The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2 ;-)
I can pretty much guarantee you WXL will also have those since it's modifications to make Windows as small as possible. I wouldn't trust Malwarebytes as far as I can throw it. Way too many false positives
 

My Computer My Computer

At a glance

Windows 11Intel(R) Core(TM) i7-8700 CPU @ 3.20GHzG.Skill F4-3200C16D-16GTZR Trident Z RGB Seri...PowerColor Fighter AMD Radeon RX 6700 XT w/ 1...
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Custom
CPU
Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Motherboard
ROG Maximus X Code
Memory
G.Skill F4-3200C16D-16GTZR Trident Z RGB Series 16 GBx2 (32GB)
Graphics Card(s)
PowerColor Fighter AMD Radeon RX 6700 XT w/ 12GB GDDR6 Memory
Monitor(s) Displays
3x ASUS VP28UQG 28" 4K/UHD 3840x2160 1ms DP HDMI Adaptive Sync/FreeSync Eye Care Monitor
Screen Resolution
3840x2160 x3
Hard Drives
1x 1TB NVME SSD
1x 1TB Sata SSD
1x 1TB Hard Drive (7200rpm)
Keyboard
Razer Huntsman V2 TKL
Mouse
Razer Basilisk V3 Pro
Internet Speed
750 Up / 20 Down
Browser
Brave Beta
Antivirus
ESET Smart Security Premium
  • Like
Reactions: OAT
I can pretty much guarantee you WXL will also have those since it's modifications to make Windows as small as possible. I wouldn't trust Malwarebytes as far as I can throw it. Way too many false positives
Thanks for keeping up with this thread.
 

My Computers My Computers

  • At a glance

    All Branches but ReleaseAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Release
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender
  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
I downloaded MWB and (while it also installed crapass Edge somehow.) I got the same things you got 1786885529997.webpand this is from ESET Smart Security Premium which I trust a hell of a lot more than MWB. Just sounds like MWB is being MWB and thinking every possible thing is wrong 1786885479473.webp
 

My Computer My Computer

At a glance

Windows 11Intel(R) Core(TM) i7-8700 CPU @ 3.20GHzG.Skill F4-3200C16D-16GTZR Trident Z RGB Seri...PowerColor Fighter AMD Radeon RX 6700 XT w/ 1...
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Custom
CPU
Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Motherboard
ROG Maximus X Code
Memory
G.Skill F4-3200C16D-16GTZR Trident Z RGB Series 16 GBx2 (32GB)
Graphics Card(s)
PowerColor Fighter AMD Radeon RX 6700 XT w/ 12GB GDDR6 Memory
Monitor(s) Displays
3x ASUS VP28UQG 28" 4K/UHD 3840x2160 1ms DP HDMI Adaptive Sync/FreeSync Eye Care Monitor
Screen Resolution
3840x2160 x3
Hard Drives
1x 1TB NVME SSD
1x 1TB Sata SSD
1x 1TB Hard Drive (7200rpm)
Keyboard
Razer Huntsman V2 TKL
Mouse
Razer Basilisk V3 Pro
Internet Speed
750 Up / 20 Down
Browser
Brave Beta
Antivirus
ESET Smart Security Premium
1786890110242.webpUpdate 10 is coming at some point today!
 

My Computer My Computer

At a glance

Windows 11Intel(R) Core(TM) i7-8700 CPU @ 3.20GHzG.Skill F4-3200C16D-16GTZR Trident Z RGB Seri...PowerColor Fighter AMD Radeon RX 6700 XT w/ 1...
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Custom
CPU
Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Motherboard
ROG Maximus X Code
Memory
G.Skill F4-3200C16D-16GTZR Trident Z RGB Series 16 GBx2 (32GB)
Graphics Card(s)
PowerColor Fighter AMD Radeon RX 6700 XT w/ 12GB GDDR6 Memory
Monitor(s) Displays
3x ASUS VP28UQG 28" 4K/UHD 3840x2160 1ms DP HDMI Adaptive Sync/FreeSync Eye Care Monitor
Screen Resolution
3840x2160 x3
Hard Drives
1x 1TB NVME SSD
1x 1TB Sata SSD
1x 1TB Hard Drive (7200rpm)
Keyboard
Razer Huntsman V2 TKL
Mouse
Razer Basilisk V3 Pro
Internet Speed
750 Up / 20 Down
Browser
Brave Beta
Antivirus
ESET Smart Security Premium
Last edited:

My Computer My Computer

At a glance

Win 11 Insider Release Preview and Beta chann...i5 Core [email protected] (Unsupported for Win 11)12GBGeneric PnP Monitor (1920x1080@60Hz) Intel HD...
OS
Win 11 Insider Release Preview and Beta channels.
Computer type
Laptop
Manufacturer/Model
HP ENVY Bought: March 2017
CPU
i5 Core [email protected] (Unsupported for Win 11)
Motherboard
HP 81AD (U3E1)
Memory
12GB
Graphics Card(s)
Generic PnP Monitor (1920x1080@60Hz) Intel HD Graphics 620 (HP)
Sound Card
Conexant ISST audio
Monitor(s) Displays
Generic PnP Monitor
Screen Resolution
1536x864 pixels
Hard Drives
HGST HTS721010A9E630
PSU
Well...PSU you too!! What's this mean?
Case
HP ENVY SILVER
Cooling
A fan.
Keyboard
USA
Mouse
Logitec Anywhere 2
Internet Speed
Good enough for me! Fast!
Browser
Edge/Waterfox
Antivirus
Windows Defender
Other Info
No 'mo.

Update 10 is out!
 

My Computer My Computer

At a glance

Windows 11Intel(R) Core(TM) i7-8700 CPU @ 3.20GHzG.Skill F4-3200C16D-16GTZR Trident Z RGB Seri...PowerColor Fighter AMD Radeon RX 6700 XT w/ 1...
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Custom
CPU
Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Motherboard
ROG Maximus X Code
Memory
G.Skill F4-3200C16D-16GTZR Trident Z RGB Series 16 GBx2 (32GB)
Graphics Card(s)
PowerColor Fighter AMD Radeon RX 6700 XT w/ 12GB GDDR6 Memory
Monitor(s) Displays
3x ASUS VP28UQG 28" 4K/UHD 3840x2160 1ms DP HDMI Adaptive Sync/FreeSync Eye Care Monitor
Screen Resolution
3840x2160 x3
Hard Drives
1x 1TB NVME SSD
1x 1TB Sata SSD
1x 1TB Hard Drive (7200rpm)
Keyboard
Razer Huntsman V2 TKL
Mouse
Razer Basilisk V3 Pro
Internet Speed
750 Up / 20 Down
Browser
Brave Beta
Antivirus
ESET Smart Security Premium
  • Like
Reactions: OAT

Update 10 is out!
25h2
 

My Computers My Computers

  • At a glance

    All Branches but ReleaseAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Release
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender
  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB

Latest Support Threads

Back
Top Bottom