Author Topic: Need help/info on AMBSPISyncService.exe opened by RunOnce.exe at every startup  (Read 5938 times)

0 Members and 1 Guest are viewing this topic.

MortenJGL

  • Guest
Hi all,

Does anyone know anything about the file in the title, AMBSPISyncService.exe? Avast! opens a warning at every startup and suggests opening in Sandbox.
The file is located in
C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}
A scan of the file using Avast! declares no threat. But this shouldn't happen every time I boot, right?

Thanks for your time.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37181
http://www.runscanner.net/lib/AMBSPISyncService.exe.html

Quote
Ambspisyncservice.exe with description License Sync Service (X-Fi MB) is a process file from company Creative Technology Ltd belonging to product Creative Software Sales.
 The file is not digitally signed.


Quote
But this shouldn't happen every time I boot, right?
dont you have a "remember my answer" on that popup ?
« Last Edit: November 25, 2011, 01:43:20 PM by Pondus »

MortenJGL

  • Guest
dont you have a "remember my answer" on that popup ?

Yes, I do, but I was sceptical about allowing that.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37181
and you can always....

upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


alternative
Jotti     http://virusscan.jotti.org/en
VirSCAN   http://virscan.org/
Metascan   http://www.metascan-online.com/


MortenJGL

  • Guest
and you can always....

upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


Result:
http://www.virustotal.com/file-scan/report.html?id=2a447a955829ccbba181205d908166bbad9993b40ec0b9a5fa0d28334a49b0f6-1322231499#

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37181
so it is old....should have been detected by lots of AV if infected

First seen: 2009-12-24 17:40:26
Last seen : 2011-11-25 14:31:39




sigcheck:
publisher....: Creative Technology Ltd
copyright....: Copyright (c) Creative Technology Ltd., 2007-2009. All rights reserved.
product......: Creative Software Sales
description..: License Sync Service (X-Fi MB)
original name: AMBSPISyncService.exe
internal name: License Sync Service (X-Fi MB)
file version.: 1.0.5.0
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned