Official GIGABYTE Forum

Virus on H55 Gigabyte Driver Disk

Virus on H55 Gigabyte Driver Disk
« on: November 27, 2011, 03:31:27 pm »
Hello

Can anyone suggest what I should do? I have spent a year trying to set up a system (on and off) and it keeps failing with viruses, bsod and all sorts of random behaviour.

I believe I have now tracked it down to a file on the Gigabyte disk (12DC1-10IH55S-100CR ver1.0). which has all the drivers on it.

MS Essentials picks up Trojan:Win32/Malagent in the following file

file:D:\Utility\Gigabyte\GOM\data1.cab->(ishld#0002)

This then leads to further infection of the computer by the Gael.D virus.

Has anyone come across this before and can someone suggest the best way to obtain drivers for the mobo that can be checked for viruses before being installed?

Thanks

Mark

Gloup_Gloup

  • 982
  • 33
  • Let us sweet between members, on the forum.
Re: Virus on H55 Gigabyte Driver Disk
« Reply #1 on: November 27, 2011, 04:50:30 pm »
Hi markdibley, ;)

I do not find GOM Gigabyte Online Manager  Software. After few hours of search on Internet.

But I find this :

GOM is A web-based system management tool that allows client system hardware information such as CPU and memory and graphics card and much more to be monitored or controlled via a host.

In other therm : allows you to monitor the components of your machines at a distance.

It was the Gigabyte Online Management software that comes with the motherboard in the background continuously causing snmp.exe to run (and at increasing memory 9mb to 191mb, by exemple).

So this software take many place in process of Windows and Ram.
Before use GOM, the SNMP Protocol (snmp.exe) must be actived.

GOM is called before or again COM - Corporate Online Manager. (Executive file on system : Gbtray.exe and Cml.exe )
They are include with ETAgent

http://gigabyte.com/MicroSite/117/tech_20060605_safe.htm
http://www.gigabyte.com/MicroSite/117/tech_20060523_s5_safe.htm

My suggestion : Forgot it.
 Take a Hardware Monitor Pro
http://www.cpuid.com/softwares/hwmonitor-pro.html

Gloup_Gloup
« Last Edit: November 27, 2011, 06:10:52 pm by Gloup_Gloup »

Gloup_Gloup

  • 982
  • 33
  • Let us sweet between members, on the forum.
Re: Virus on H55 Gigabyte Driver Disk
« Reply #2 on: November 27, 2011, 09:03:17 pm »
Hi markdibley, ;)
...
GOM is called before or again COM - Corporate Online Manager. (Executive file on system : Gbtray.exe and Cml.exe )
They are include with ETAgent
...
Gloup_Gloup

Hi all,  ;)

Do not confuse the executable gbtray.exe with another of exactly the same name.
From Game Booster. Made by IObit.
http://www.iobit.com/gamebooster.html

Gloup_Gloup

Dark Mantis

  • *
  • 18405
  • 414
  • 10typesofpeopleoneswhoknow binaryandoneswhodont
    • Dark Mantis
Re: Virus on H55 Gigabyte Driver Disk
« Reply #3 on: November 28, 2011, 07:18:55 am »
Hi

I agree with Gloup_Gloup's advice there and it isn't malware just that some anti-viral programs will pick it up and list it as such because of the way it works. It has virus like activity. You don't need it so get shot of it and run your machine with that and any other bundled software that you have been tempted to install.
Gigabyte X58A-UD7
i7 920
Dominators 1600 x6 12GB
6970 2GB
HX850
256GB SSD, Sam 1TB, WDB320GB
Blu-Ray
HAF 932

Gigabyte Z68X-UD5-B3
i7 3770K
Vengeance 1600 16GB
6950 2GB
HCP1200W
Revo Drive x2, 1.5TB WDB RAID0
16x DLRW
StrikeX S7
Full water cooling
3 x 27" Iiy