Last month I clicked a video on facebook, and it was unable to play. A download window popped up and i downloaded MediaPluginSetup from Game Play labs. I installed this addon and the video played fine. Today my computer’s RAM usage was quite high although I didnt have any programs running, also the CPU fan was going nuts!! Also I got several network threat alerts from Avast! I had MBAM PRO running on real time + AIS 6, none of them detected this till today. I just wanted to check what was wrong so ran a quick scan and it detected this as a spyware…
I wanted to submit it to Avast virus lab but after I restored from MBAM quarantine it shows the file as safe! Still I uploaded it to Avast labs hope they add it, but just in case can one of you guys inform an Admin about this ? its MediaPluginSetup from Game Play labs.
Another issue - Does anyone know how to remove the “twitter” logo from Avast! notifications? I mainly get it when there are threat alerts, the little “T” logo - I find this VERY annoying and out of place… I dont know why they have put it there in the first place since its very inappropriate… Please let me know if anyone knows how to remove it
upload suspicious file(s) to www.virustotal.com and test with 43 malware scanners
when you have the result, copy the URL in the address bar and post it here so we can see
Like I said, after restoring it from MBAM quarantine it doesnt detect that as a threat anymore… But I’m pretty sure that it is a threat because MBAM detected it along with several other registry keys…
Ok I will try but what I meant what, what if MBAM “cleaned” or “disinfected” the file ? Also my Avast GUI became a bit messed up just now, dont know if it has anything to do with the infection, I’m running a scan on SAS as well, will restart the pc and see if it will be back to normal… but at the moment its like this -
Oh ok. Thanks for the info! Anyway I dont know why MBAM doesnt detect the file as a virus once I restore it :-\ guess I ll have to ask their admins about it…
Anyway I scanned it on VirusTotal - there was another potential malware that Avast! didnt detect so I scanned that as well… So the 2 links for the files are
ibelicomeposu.dll was detected as a malware on quite a bit of different software…
(10/41)
Also May I know how you got the info about this file? The info you typed is very accurate, but when I googled it, no results came up…
about BHO - as I explained in the first post, I was forced to install it (couldnt play videos online without this plugin), but now after it being removed the videos are playing fine, I find that a little bit suspicious…
Oh ok. Thanks for the info! Anyway I dont know why MBAM doesnt detect the file as a virus once I restore it guess I ll have to ask their admins about it..
have you updated Malwarebytes since it was first detected ?
Yes MBAM was updated - I always update MBAM before running a scan, however yesterday BHO was detected and after I restored it, it said the file is safe - I did not update it inbetween this incident - had the same definitions…
This is exactly what I got from MBAM - this is what it detected the 2 files as. Did you run a scan on MBAM or ? So anyway do you think these are actual viruses? If so please send it to Avast labs.
The file 'BHO.dll' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.
The file ‘ibelicomeposu.dll’ has been determined to be ‘FALSE POSITIVE’. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
