Need help/info on AMBSPISyncService.exe opened by RunOnce.exe at every startup

General Topics
1

Hi all,

Does anyone know anything about the file in the title, AMBSPISyncService.exe? Avast! opens a warning at every startup and suggests opening in Sandbox.
The file is located in
C:\Program Files (x86)\InstallShield Installation Information{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}
A scan of the file using Avast! declares no threat. But this shouldn’t happen every time I boot, right?

Thanks for your time.

2

http://www.runscanner.net/lib/AMBSPISyncService.exe.html

Ambspisyncservice.exe with description License Sync Service (X-Fi MB) is a process file from company Creative Technology Ltd belonging to product Creative Software Sales. The file is not digitally signed.
But this shouldn't happen every time I boot, right?
dont you have a "remember my answer" on that popup ?
3

Yes, I do, but I was sceptical about allowing that.

4

and you can always…

upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see

alternative
Jotti http://virusscan.jotti.org/en
VirSCAN http://virscan.org/
Metascan http://www.metascan-online.com/

5

Result:
http://www.virustotal.com/file-scan/report.html?id=2a447a955829ccbba181205d908166bbad9993b40ec0b9a5fa0d28334a49b0f6-1322231499#

6

so it is old…should have been detected by lots of AV if infected

First seen: 2009-12-24 17:40:26
Last seen : 2011-11-25 14:31:39

sigcheck:
publisher…: Creative Technology Ltd
copyright…: Copyright (c) Creative Technology Ltd., 2007-2009. All rights reserved.
product…: Creative Software Sales
description…: License Sync Service (X-Fi MB)
original name: AMBSPISyncService.exe
internal name: License Sync Service (X-Fi MB)
file version.: 1.0.5.0
comments…: n/a
signers…: -
signing date.: -
verified…: Unsigned