GHOST SPECTRE

OAT · Aug 16, 2026

jajk said:
Before I leave the G-S community, here is what Malware bytes picked up:
View attachment 179775
The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2

How can policies made by MS be detected as threats?
The first and third .reg entries disables any Windows Update via MS Update while the 2nd disables task manager.

"The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)"
Just to show you that Malwarebytes is a bit overzealous on its detection of so-called threats.

The others are user induced as I don't have them on my test system.

In truth I have long uninstalled Malwarebytes as too many false positive flagging was happening.
It used to be excellent and truthful though so I don't know what happened there.

Marie SWE · Aug 16, 2026

OAT said:
How can policies made by MS be detected as threats?
The first and third .reg entries disables any Windows Update via MS Update while the 2nd disables task manager.

"The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)"
Just to show you that Malwarebytes is a bit overzealous on its detection of so-called threats.

The others are user induced as I don't have them on my test system.

I have not have the opportunity to dig in to it (install a VM) so i cant say much.. what i did find interesting was the infatica_agent.exe
Did you test G-S too and did you find that file?

OAT · Aug 16, 2026

Marie SWE said:
I have not have the opportunity to dig in to it (install a VM) so i cant say much.. what i did find interesting was the infatica_agent.exe
Did you test G-S too and did you find that file?

Don't have that file which is usually within some codec packs. (K-Lite Mega Codec Pack)
The process list also indicates nothing of concern for now but the test is on going as I am monitoring network activity.
All tools used for testing are within the WSCC suite.

Marie SWE · Aug 16, 2026

OAT said:
Don't have that file which is usually within some codec packs. (K-Lite Mega Codec Pack)

I wonder what K-light.. i running that on my Win7 computer i have to my TV and home cinema system.. and i dont have that one.
But Jajk did install a nav maps software.. perhaps it followed that one. :think:

I have Asus and Asus don't install proxy/residential bandwidth-sharing software with their products as far i know. *lol*

EchoJPR · Aug 16, 2026

jajk said:
Before I leave the G-S community, here is what Malware bytes picked up:
View attachment 179775
The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2

I can pretty much guarantee you WXL will also have those since it's modifications to make Windows as small as possible. I wouldn't trust Malwarebytes as far as I can throw it. Way too many false positives

OAT · Aug 16, 2026

EchoJPR said:
I can pretty much guarantee you WXL will also have those since it's modifications to make Windows as small as possible. I wouldn't trust Malwarebytes as far as I can throw it. Way too many false positives

Thanks for keeping up with this thread.

EchoJPR · Aug 16, 2026

I downloaded MWB and (while it also installed crapass Edge somehow.) I got the same things you got

and this is from ESET Smart Security Premium which I trust a hell of a lot more than MWB. Just sounds like MWB is being MWB and thinking every possible thing is wrong

EchoJPR · Aug 16, 2026

Update 10 is coming at some point today!

mecanicogolf · Aug 16, 2026

EchoJPR said:
View attachment 179813Update 10 is coming at some point today!

Thanks for the heads up. And thanks for following this thread.
Could you publish it when it rolls out?

EchoJPR · Aug 16, 2026

G-W11-25H2-PRO-U10

WPE+ Bootable —————————With Update (26200.9168) - U10(Based on the official ISO version 25H2 with updates.)Datavaults:DownloadUserDrive:DownloadSwift:DownloadDLsurf (2 Part): PART001 / PART002 Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.22GB ...

docs.google.com

Update 10 is out!

OAT · Aug 16, 2026

EchoJPR said:
G-W11-25H2-PRO-U10

WPE+ Bootable —————————With Update (26200.9168) - U10(Based on the official ISO version 25H2 with updates.)Datavaults:DownloadUserDrive:DownloadSwift:DownloadDLsurf (2 Part): PART001 / PART002 Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.22GB ...

docs.google.com

Update 10 is out!

25h2

OAT · Aug 16, 2026

EchoJPR said:
G-W11-25H2-PRO-U10

WPE+ Bootable —————————With Update (26200.9168) - U10(Based on the official ISO version 25H2 with updates.)Datavaults:DownloadUserDrive:DownloadSwift:DownloadDLsurf (2 Part): PART001 / PART002 Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.22GB ...

docs.google.com

Update 10 is out!

Thank you. No issues this far.

jajk · Aug 16, 2026

I will point out that MWB scan was performed after I manually deleted Infatica infection and that the infection occurred 1 to 2 days after I installed G-S so I am guessing it was brought in on a scheduled task.

OAT · Aug 16, 2026

jajk said:
I will point out that MWB scan was performed after I manually deleted Infatica infection and that the infection occurred 1 to 2 days after I installed G-S so I am guessing it was brought in on a scheduled task.

Guessing is really not the way to go.
You want to find out where it comes from, you reinstall from scratch and monitor network traffic.
You will be sure then where the source lies. Keep us posted.
I wish I could help, but that .exe never made it on my system,( Superlite + DF. )

jajk · Aug 16, 2026

I installed G-S IoT Superlite SE V9 so maybe it is only a problem with this ISO?
Also, I only wanted to have a quick look at IoT as I do not have a license for it so not going to waste my time forensically analyzing it. I already fixed the problem.
No it did not come in on K-Lite Codecs from the proper site which I did install but as the "standard" version and not with the "optional offer"

When Infatica was first doing the rounds in 21~22, many piled on to the theory that blamed K-Lite as the carrier but with little to no evidence. Seems old habits are hard to break.....

mecanicogolf · Aug 17, 2026

I have downloaded and installed the new U10 GS update. So far running good and pretty fast. I bumped it up to the Release Preview while I was at it/ Won't go higher though. Running too good to mess with it anymore. I mean move up to a higher and more unstable build.

OAT · Aug 17, 2026

mecanicogolf said:
I have downloaded and installed the new U10 GS update. So far running good and pretty fast. I bumped it up to the Release Preview while I was at it/ Won't go higher though. Running too good to mess with it anymore. I mean move up to a higher and more unstable build.

I went to RP as well.

mecanicogolf · Aug 19, 2026

I have tried to bump up to:

KB5121000 Windows 11 Cumulative Update build 28000.2704 (26H1)

I went to the Insiders page and checked the 26H1 dot and restarted. I then checked for updates and nothing. GS i assume wil not let you switch from 25H2 to 26H1, even though you check the box. I am wondering why this is and if there may be a workaround for this. Anyone have any clues?

XxXxX · Aug 19, 2026

mecanicogolf said:
I have tried to bump up to:

KB5121000 Windows 11 Cumulative Update build 28000.2704 (26H1)
I went to the Insiders page and checked the 26H1 dot and restarted. I then checked for updates and nothing. GS i assume wil not let you switch from 25H2 to 26H1, even though you check the box. I am wondering why this is and if there may be a workaround for this. Anyone have any clues?

26H1 is a limited update/upgrade for certain systems. if you install 26H1 on an x64 system you will be unable to upgrade to 26H2.

best of luck Steve ..

mecanicogolf · Aug 19, 2026

XxXxX said:
26H1 is a limited update/upgrade for certain systems. if you install 26H1 on an x64 system you will be unable to upgrade to 26H2.

best of luck Steve ..

I understand, but it's there on the Insider page to be checked. I wonder why it's there?

GHOST SPECTRE

Venomous Member

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Venomous Member

Attachments

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Venomous Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Venomous Member

My Computers My Computers

At a glance

At a glance

Venomous Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Venomous Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Venomous Member

My Computers My Computers

At a glance

At a glance

Well-known member

KB5121000 Windows 11 Cumulative Update build 28000.2704 (26H1)​

My Computer My Computer

At a glance

Just a Computer User

KB5121000 Windows 11 Cumulative Update build 28000.2704 (26H1)​

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Similar threads

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

My Computer

My Computer

My Computer

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

KB5121000 Windows 11 Cumulative Update build 28000.2704 (26H1)

My Computer

KB5121000 Windows 11 Cumulative Update build 28000.2704 (26H1)

My Computers

My Computer