GHOST SPECTRE

OAT · 2026-08-16T08:17:40-0400

jajk said:
Before I leave the G-S community, here is what Malware bytes picked up:
View attachment 179775
The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2

How can policies made by MS be detected as threats?
The first and third .reg entries disables any Windows Update via MS Update while the 2nd disables task manager.

"The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)"
Just to show you that Malwarebytes is a bit overzealous on its detection of so-called threats.

The others are user induced as I don't have them on my test system.

In truth I have long uninstalled Malwarebytes as too many false positive flagging was happening.
It used to be excellent and truthful though so I don't know what happened there.

Marie SWE · 2026-08-16T08:25:33-0400

OAT said:
How can policies made by MS be detected as threats?
The first and third .reg entries disables any Windows Update via MS Update while the 2nd disables task manager.

"The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)"
Just to show you that Malwarebytes is a bit overzealous on its detection of so-called threats.

The others are user induced as I don't have them on my test system.

I have not have the opportunity to dig in to it (install a VM) so i cant say much.. what i did find interesting was the infatica_agent.exe
Did you test G-S too and did you find that file?

OAT · 2026-08-16T08:28:52-0400

Marie SWE said:
I have not have the opportunity to dig in to it (install a VM) so i cant say much.. what i did find interesting was the infatica_agent.exe
Did you test G-S too and did you find that file?

Don't have that file which is usually within some codec packs. (K-Lite Mega Codec Pack)
The process list also indicates nothing of concern for now but the test is on going as I am monitoring network activity.
All tools used for testing are within the WSCC suite.

Marie SWE · 2026-08-16T08:34:06-0400

OAT said:
Don't have that file which is usually within some codec packs. (K-Lite Mega Codec Pack)

I wonder what K-light.. i running that on my Win7 computer i have to my TV and home cinema system.. and i dont have that one.
But Jajk did install a nav maps software.. perhaps it followed that one. :think:

I have Asus and Asus don't install proxy/residential bandwidth-sharing software with their products as far i know. *lol*

EchoJPR · 2026-08-16T08:56:58-0400

jajk said:
Before I leave the G-S community, here is what Malware bytes picked up:
View attachment 179775
The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2

I can pretty much guarantee you WXL will also have those since it's modifications to make Windows as small as possible. I wouldn't trust Malwarebytes as far as I can throw it. Way too many false positives

OAT · 2026-08-16T09:02:28-0400

EchoJPR said:
I can pretty much guarantee you WXL will also have those since it's modifications to make Windows as small as possible. I wouldn't trust Malwarebytes as far as I can throw it. Way too many false positives

Thanks for keeping up with this thread.

EchoJPR · 2026-08-16T09:06:06-0400

I downloaded MWB and (while it also installed crapass Edge somehow.) I got the same things you got

and this is from ESET Smart Security Premium which I trust a hell of a lot more than MWB. Just sounds like MWB is being MWB and thinking every possible thing is wrong

EchoJPR · 2026-08-16T10:22:14-0400

Update 10 is coming at some point today!

mecanicogolf · 2026-08-16T11:47:22-0400

EchoJPR said:
View attachment 179813Update 10 is coming at some point today!

Thanks for the heads up. And thanks for following this thread.
Could you publish it when it rolls out?

EchoJPR · 2026-08-16T14:02:11-0400

G-W11-25H2-PRO-U10

WPE+ Bootable —————————With Update (26200.9168) - U10(Based on the official ISO version 25H2 with updates.)Datavaults:UPLOADING..UserDrive:DownloadSwift:DownloadDLsurf (2 Part): UPLOADING.. Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.22GB For...

docs.google.com

Update 10 is out!

OAT · 2026-08-16T14:37:02-0400

EchoJPR said:
G-W11-25H2-PRO-U10

WPE+ Bootable —————————With Update (26200.9168) - U10(Based on the official ISO version 25H2 with updates.)Datavaults:UPLOADING..UserDrive:DownloadSwift:DownloadDLsurf (2 Part): UPLOADING.. Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.22GB For...

docs.google.com

Update 10 is out!

25h2

OAT · 2026-08-16T15:53:40-0400

EchoJPR said:
G-W11-25H2-PRO-U10

WPE+ Bootable —————————With Update (26200.9168) - U10(Based on the official ISO version 25H2 with updates.)Datavaults:UPLOADING..UserDrive:DownloadSwift:DownloadDLsurf (2 Part): UPLOADING.. Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.22GB For...

docs.google.com

Update 10 is out!

Thank you. No issues this far.

jajk · 2026-08-16T17:00:09-0400

I will point out that MWB scan was performed after I manually deleted Infatica infection and that the infection occurred 1 to 2 days after I installed G-S so I am guessing it was brought in on a scheduled task.

OAT · 2026-08-16T17:06:26-0400

jajk said:
I will point out that MWB scan was performed after I manually deleted Infatica infection and that the infection occurred 1 to 2 days after I installed G-S so I am guessing it was brought in on a scheduled task.

Guessing is really not the way to go.
You want to find out where it comes from, you reinstall from scratch and monitor network traffic.
You will be sure then where the source lies. Keep us posted.
I wish I could help, but that .exe never made it on my system,( Superlite + DF. )

jajk · 2026-08-16T17:30:08-0400

I installed G-S IoT Superlite SE V9 so maybe it is only a problem with this ISO?
Also, I only wanted to have a quick look at IoT as I do not have a license for it so not going to waste my time forensically analyzing it. I already fixed the problem.
No it did not come in on K-Lite Codecs from the proper site which I did install but as the "standard" version and not with the "optional offer"

When Infatica was first doing the rounds in 21~22, many piled on to the theory that blamed K-Lite as the carrier but with little to no evidence. Seems old habits are hard to break.....

mecanicogolf · 2026-08-17T05:01:38-0400

I have downloaded and installed the new U10 GS update. So far running good and pretty fast. I bumped it up to the Release Preview while I was at it/ Won't go higher though. Running too good to mess with it anymore. I mean move up to a higher and more unstable build.

GHOST SPECTRE

Bizarre Member

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Bizarre Member

Attachments

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Bizarre Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Bizarre Member

My Computers My Computers

At a glance

At a glance

Bizarre Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Bizarre Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Similar threads

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

My Computer

My Computer

My Computer

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computer