Jump to content

Malwarebytes

GO Toolbar False Positive


3 replies to this topic

#1
petar

    New Member

  • Members
  • Pip
  • 2 posts
The GO toolbar was a toolbar designed at Middlebury College (www.middlebury.edu). Development of the toolbar has stopped but it is still present on many College computers. MBAM detects it as malware. Here's a link to the former website for the GO toolbar:
http://web.archive.org/web/20051216213103/.../downloads.html

Attached is the MBAM log.

Let me know if you need any further information.

Attached Files



#2
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,158 posts
  • Location:Northampton, MA USA
http://www.systemlookup.com/search.php?typ...f1c5211}&s=

http://www.systemlookup.com/CLSID/26396-go...Search_dll.html


Was it designed by them or a wrapper over this adware ? I am trying to find any part of this that is not malware but I am not having any luck so far .

I will look into this further .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,158 posts
  • Location:Northampton, MA USA
http://www.virustotal.com/analisis/8868dd3...cbc8-1258073748

I dont see how I can delist this .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#4
petar

    New Member

  • Members
  • Pip
  • 2 posts
Yeah, the virustotal scan looks scary! I am pretty sure the toolbar was not designed as a wrapper around the malware. I think it's a coincidence that the malicious GoBar has a dll file with the same name as our toolbar. Thanks for trying and please don't spend any more time on this, we are gradually removing it from the College's computers since it's not being used any more.

Thanks,
-Petar





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us