Potential Malware!! :- MediaPluginInstall from game play labs is a spyware!!!

[nounzein]

This is really wired i've installed this file since yesterday and i've got nothing suspicious (till now) but a spyware that you can uninstall!!! I've never seen that...
And it seems that he attached him selfs with the browser that you opened with as an extension (chrome in my case).

[anrose]

I would suggest that you use this antivirus Dr.Web Anti Virus for Windows 4.44. It is best for viruses like the one you encounter on facebook. Try using it you'll definitely like it.

[polonus]

Hi nounzein,

That is the Browser Help Object that comes with the install: http://www.google.nl/search?sourceid=chrome&ie=UTF-8&q=0xD7DC7DFE31FA56BBF486E947D89C68F3
See: http://www.threatexpert.com/report.aspx?md5=20d3f7c94b5265c14d05554c50eb8fa1
Anubis report:
http://anubis.iseclab.org/?action=result&task_id=16ae099d4a0b736c42509e155e9aad9b3&format=xml&save=1

It comes now with new installer campaigns, added unwanted installs of BHO's, I had a nasty one with PicPick installer from softonic with a Bing toolbar recently.
and there are more examples...

polonus

[Pondus]

Norman analysis added detection

Here is the one i found in reply #56

MediaPluginSetup.exe : Processed - GamePlay.D

and here is the one @nounzein sendt me

MediaPluginSetup.exe : Processed - GamePlay.A

[DraKuL]

Wonder why Avast isnt adding it 

[DraKuL]

Ok so I was just messing around with the browser extensions today and found out that another browser extension from gameplay labs called gameplay labs plugin was installed(obviously it got installed with that media plugin) but before removing it from the GUI of the browser I searched everywhere on the user documents, appdata but couldnt find anything on it.. Dont know how it was still there and why MBAM didnt detect it.. It was installed on firefox as well. It was enabled by default, even if I disable it will get enabled the next time I run the browser. At first the option to remove it completely wasnt there.. but after restarting the computer and disconnecting from the internet, I was able to remove it from both these browsers..

I searched a bit about this plugin and it has given so many people a lot of trouble.. Just google "Gameplay labs plugin" and you'll see

Anyway if it really is a spyware and it steals passwords and stuff so many sensitive information of mine has been leaked 

Avast still hasn't added detection though, I doubt if they will do it in the future..