• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Driverbooster threat warning

I have a File Insight warning, "This threat has been detected. We recommend you remove this threat." It shows a name of DriverBooster. The directory lines show IObit as part of the tree, but, File Insight shows the Origin as Downloaded from Unknown.... Unknown Community Usage. Risk Low.

I SPECIFICALLY downloaded this program; From IOBIT site. I have used Other IObit programs (Smart Defrag). I did a LiveUpdate, till Nothing more found, BEFORE I downloaded, Installed AND RAN DriverBooster and got NO WARNINGS!!

File Insight says "No Fix Attempted". I chose to Exclude DriverBooster from a Fix. Got asked about Auto removing Low Risk programs. I said "Ask me First".

Replies

Kudos0

Re: Driverbooster threat warning

I got the same message today for Driver Boost from Norton.....4/22/2015

Kudos1 Stats

Re: Driverbooster threat warning

I got the same basic message this morning (4/22). Only Norton had already remove Driver Boost and told me I needed to re-boot to complete the removal.

Kudos0

Re: Driverbooster threat warning

There was a Driver Booster update to version 2.3 yesterday.....I did a support email to Iobit this morning but so far have not gotten a response.

Kudos0

Re: Driverbooster threat warning

On my PC, Norton alerted on Driver Booster 2.2. I have not yet updated to 2.3

Kudos1 Stats

Re: Driverbooster threat warning

Hello

If you think this is a false positive, please submit it to Symantec.

To report a false positive, please use this link

https://submit.symantec.com/false_positive/

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit Norton Core Security Plus 22.17.2.47 Core Firmware 282 I E 11 Chrome latest version.
Kudos1 Stats

Re: Driverbooster threat warning

IObit redirected me to download.com
Ask IObit how to download direct
Free offerings (not all) need to be paid for by hook or crook
Watch out for unwanted offerings

currently driverbooster_setup is clean

Kudos0

Re: Driverbooster threat warning

I keep getting the Threat Warning. I keep saying EXCLUDE!! NO Ignore choice.

Download.com is part of Cnet.com. I have downloaded a LOT of things from there, without getting ANY warnings.

Why, if it is a THREAT, would an UP-TO-THE-MINUTE, UPDATED, Norton Internet Security have LET ME Download... Install.... AND RUN a program that keeps coming up as a THREAT, AFTER IT WAS RUN!!

Shouldn't  a warning come up BEFORE OR DURING a download, or BEFORE  a THREAT program gets to be INSTALLED or RUN???????  Even though I believe it is a "false positive", it feels like having a Fire Alarm sounding off AFTER the fire trucks have left, and the Insurance agent is telling you what it will take to REBUILD your home.

I downloaded AND RAN this program SPECIFICALLY to find if there were any SYSTEM DRIVERS that needed updating. There were a FEW and they were UPDATED, and my pc is STILL RUNNING! So if this program was a THREAT, would I still be RUNNING??? NO NEW problems Either.

Kudos0

Re: Driverbooster threat warning

Well, apparently Symantec has something against Driver Booster. I submitted a False Positive report to Symantec this morning and received the following reply within a few hours:

In relation to submission [3772872].

Upon further analysis and investigation we have determined that the file(s) in question meet the necessary criteria to be detected by our products and as such, the detection cannot be revoked.

For more details about DriverBooster please see link below:

http://www.symantec.com/security_response/writeup.jsp?docid=2015-041319-2905-99

For additional information on how to configure Symantec products to exclude specific drives, folders, and files from being scanned please see below.

Symantec Enterprise

- Information on exclusions: http://www.symantec.com/business/support/index?page=content&id=HOWTO55204

- Support: http://www.symantec.com/business/support/index?page=home

Norton Consumer

- Information on real time exclusions can be found under the section "Exclude files or folders from scan": https://support.norton.com/sp/en/us/norton-antivirus/19.0/solutions/kb20100222230832EN_EndUserProfile_en_us

- Support: http://www.symantec.com/norton/support/index.jsp

Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.

Sincerely,

Symantec Security Response

http://securityresponse.symantec.com

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.

Following the link for more details yields the following:

Updated: April 13, 2015 8:22:25 PM

Type: Potentially Unwanted App

Infection Length: Varies

Name: DriverBooster

Version: 2.2

Publisher: IOBit

Risk Impact: Low

Systems Affected: Windows 7, Windows Vista, Windows XP

Behavior

DriverBooster is a potentially unwanted application that displays inaccurate information about issues on the computer.
 

Antivirus Protection Dates

  • Initial Rapid Release version April 13, 2015 revision 004

  • Latest Rapid Release version April 22, 2015 revision 054

  • Initial Daily Certified version April 13, 2015 revision 017

  • Latest Daily Certified version April 23, 2015 revision 001

  • Initial Weekly Certified release date April 15, 2015

So I guess the only option is to follow the instructions to Exclude Driver Booster from NS virus scans.

Kudos0

Re: Driverbooster threat warning

I did the Online Support at Iobit for the Driver Booster and got an email asking for screen shots of the Norton Threat Error and was also asked to run a program that gave Iobit some information about the Driver Booster to see what the problem is.   I am still getting the Threat Errors a couple of times a day even though I am doing the Exclude for the error on Nortons.

Kudos0

Re: Driverbooster threat warning

How to post an image in the forums.
Download Insight may have given a clean green.  Then AutoProtect may flag at some point.  Perhaps Norton is reporting Product Tamper event.    Are there unresolved events.  Not sure if you're reporting a download flag or run flag.   Is file quarantined on download / on run.  ???  Is file blocked / removed ???  Are your referring to an installer setup file or a run application.
Not sure if you're Excluding from Scans and or Excluding from AutoProtect.  If you Exclude from Quarantine then you may have to also Exclude from AutoProtect.   My IObit driverbooster_setup download was clean.  I'm not installing and running to test.

You may Choose File and / or Search hash at VirusTotal (link is external) or upload file to VirSCAN (link is external) and/or Jotti.   (link is external) and/or submit for review analysis How to report false positives mentioned earlier. 

Kudos0

Re: Driverbooster threat warning

Kudos0

Re: Driverbooster threat warning

The first image about the Quarantine is where I clicked on the Quarantine message in the lower left hand corner of the other image that says Removed Files Are Quarantined.  To restore, click here.

The second Image is what I got when I clicked the above message.

All the times I have gotten the error I am just surfing the Internet or checking emails....I have not been running the Driver Booster manually.
Kudos0

Re: Driverbooster threat warning

Um, as you'll see the file name is different with my download.  You may compare the thumbprint and submit to virustotal for a second opinion...or submit the file to sites posted above.  Have you tried another pull from cnet to see what happens.

Filename: driver_booster_setup.exe
Full Path: c:\Users\bjms\Downloads\driver_booster_setup.exe

Details
Stability Unknown,  Many Users,  New,  Good
Developers
IObit Information Technology

File Thumbprint - SHA:
b2fe2d6378fe4a6b6f7a472afbef275e3da6662ce229603562234961496e464c
__________________________________________________________
Note: I'm running v21 and your running v22
So, did you restore from Quarantine and did you Exclude from Scan and did you Exclude from AutoProtect. 
Did you confirm file is safe by second opinion or by Norton re-analysis

Kudos0

Re: Driverbooster threat warning

I tried reinstalling from cnet too and my version is Driver Booster 2.3 but I am still getting the threat from Nortons.

Kudos0

Re: Driverbooster threat warning

Submit to Norton then....it' a speedy process.  Maybe a day or two. 
Did you confirm file is safe by second opinion or by Norton re-analysis.

Well, I tried again.  v21 likes driver_booster_setup
v22 appears a bit more critical.  Cloud detection v local detection ?

Kudos0

Re: Driverbooster threat warning

Hmmm.. Security History:

Statistical Submission : DriverBooster (Presence) Status: Submitted. No action required. 6:49:23am 4/23/2015.

About 17 lines like this going to 6:49:24am Status: Pending.

Then a Quick Scan Results line.

Then about 38 more Statistical Submission lines.

Looks like EACH of those lines is "talking" about a different file in the DriverBooster folder. Maybe that is why I am getting More THREAT warnings after Excluding. I am being asked about EACH file in the DriverBooster install?? BUT ONLY showing ONE AT A TIME???  And maybe an hour apart???  Maybe it needs to be IDLE for a bit, for Quickscan to do an "while idle" scan, and pull up ANOTHER file to Warn about???

Kudos0

Re: Driverbooster threat warning

Yes, as you note a Quarantine event will be reported via Norton Community Watch.
That way you do not receive an email report on the submission.
By manually submitting for analysis you'll supply an email for Norton to reply with their determination.  
I thought you opted to Exclude from Scans ?  If you have...then perhaps IObit is running in the background and AutoProtect is detecting.  Have you Excluded from AutoProtect.   Is DriverBooster running / calling home. 

Kudos0

Re: Driverbooster threat warning

I did the VirScan from above and got these errors:

drweb5.0.2.33005.0.1.12015-04-18Program.Unwanted.29131

quickheal14.0014.002015-04-17Suspicious12

tws17.47.173081.0.2.21082015-04-22Trojan.Generic.cbyt7

But I have had this program on my computer for a while and am just now getting these errors so I am not sure what to do now.

Kudos0

Re: Driverbooster threat warning

virustotal driver_booster_setup.exe  <info>

DrWebProgram.Unwanted

GDataWin32.Adware.iObit

SymantecDriverBooster

Again, Please submit to Symantec
See the Additional Information at virustotal to see the subfiles... <info>
I have no idea what the flag SymantecDriverBooster infers

Others will chime in and please submit to Symantec. 
Post your hash and we'll compare
All I may report is v21 Download Insight / File Insight and Scan Now deem driver_booster_setup clean/green

EDIT: v22 Download Insight / File Insight and Scan Now deem driver_booster_setup clean/green

Sorry, I'm not inclined to install/run to see what happens.

Kudos0

Re: Driverbooster threat warning

@jeanniespc Update:
I've had driverbooster_setup in my downloads folder since yesterday when Download Insight / File Insight / Scan Now reported clean n' green.

Just now...I'm questioning Norton latent detection.   Perhaps defs updated.   But, manual Scan Now / File Insight come up clean n' green. 

Kudos0

Re: Driverbooster threat warning

https://community.norton.com/en/forums/driver-booster-d%C3%A9tection

The Norton team is indeed aware of a fix to run for DriverBooster. Thank you to inform us and please wait for the correction.
Kudos0

Re: Driverbooster threat warning

I uninstalled Driver Booster until some kind of fix is made by either them or Norton.

Kudos0

Re: Driverbooster threat warning

Sounds like a plan   Cheers 

Kudos2 Stats

Re: Driverbooster threat warning

Hi everyone,

Update: Norton detecting DriverBooster installed files as a threat is right as it shows the Potentially Unwanted app(PUP) behavior. As mentioned in the Symantec threat writ-up article: DriverBooster the application displays inaccurate information about issues on the computer which is the primary reason for us categorizing it as Potentially Unwanted application(PUP). 

Customers who wants to continue using the application may need to exclude the program from all Norton detection's. To exclude the program from the detections please add the Signature "DriverBooster" to exclude from all detection's.

Thanks,
Sunil G A
Norton Forums Administrator
Symantec Corporation

Sunil_GA | Norton Forums Administrator | Symantec Corporation
Kudos0

Re: Driverbooster threat warning

Kudos1 Stats

Re: Driverbooster threat warning

This is fairly old, but I'm wondering if IOBit is behaving itself nowadays ?.................

http://shanegowland.com/tech/2012/iobit-is-a-sucky-company/

Windows 10 Home X 64 Norton Security Premium Current
Kudos0

Re: Driverbooster threat warning

IObit programs are safe. Strange that now Norton detects them as a threat!

Kudos0

Re: Driverbooster threat warning

http://www.symantec.com/security_response/writeup.jsp?docid=2015-041319-2905-99

DriverBooster is a potentially unwanted application that displays inaccurate information about issues on the computer. 
IObit programs are safe. Strange that now Norton detects them as a threat!

It's probably my fault.  I've commented Norton PUA criteria may not satisfy.  Norton PUA criteria may not satisfy all users all the time.  Go figure. 

Customers who wants to continue using the application may need to exclude the program from all Norton detection's. To exclude the program from the detections please add the Signature "DriverBooster" to exclude from all detection's.
Kudos0

Re: Driverbooster threat warning

This is fairly old, but I'm wondering if IOBit is behaving itself nowadays ?.................

I wonder if IOBit is behaving too, F4E.

I used to use that program and found it installing updates on top of updates it had already installed. Maybe to get the update count up and encouraging people to upgrade to Premium?

When Norton flagged it as a threat and uninstalled it........I let it.

Win 10 Home x64, NS 22.5.5.15, AMD A6-5400K APU and 6GB RAM
Kudos0

Re: Driverbooster threat warning

Hi, Ballistic. Given IOBit's previous record, I'd still not use any of their programs.

Windows 10 Home X 64 Norton Security Premium Current
Kudos0

Re: Driverbooster threat warning

I liked Driver Booster because it kept my drivers up to date and wish I could find a similar product that is reliable if anyone has any suggestions.  

I removed Driver Booster after I did the VirScan that was recommended above in this forum and saw the three things it detected along with Norton's response that the things detected were accurate.   I am not going to use or exclude a software that is being accurately detected with malware, spyware, or viruses.  

Kudos1 Stats

Re: Driverbooster threat warning

FWIW...I prefer reactive driver updates. If I experience an issue. I'll seek out the driver from the vendor site designated as the fix for my specific issue. Not a fan of proactive driver updates. $.02

Kudos0

Re: Driverbooster threat warning

Reactive driver updates work just fine if you know which of the myriad of drivers is causing your problem. For almost a year I fought random, intermittent, high cpu problems caused by some driver misusing ntoskrnl.exe!KeReleaseInStackQueuedSpinLock+0x1e0 with no way (for me) to trace it back to the offending driver. MS updates never fixed it. Then I found Driver Booster, and updating drivers beyond what MS did fixed the problem. This is why I prefer proactive driver updates.

I don't find "DriverBooster is a potentially unwanted application that displays inaccurate information about issues on the computer" a compelling reason to not use Driver Booster. It would be interesting to know the specifics about what Norton doesn't like in DriverBooster.

I would however, be open to replacing Driver Booster with something that has equivalent functionality from a company with a better reputation than IOBit.

Kudos2 Stats

Re: Driverbooster threat warning

Interesting, years ago I naively and blindly followed HP's Support Assistant prompt to update several drivers.  The process produced door stop.  HP apologized, advising OEM recovery and to avoid those updates.  HP driver update advice varies with agent.  I've been advised reactive and proactive. Go figure.  We all have experiences that shape are actions. 

Kudos0

Re: Driverbooster threat warning

I agree with the above post....I like proactive updates too because I would not know which software needed the update if I was having problems.   I too would love to find a software that is reliable to update my drivers in place of Driver Booster.

Kudos0

Re: Driverbooster threat warning

Hello

The best way I think is to go to the manufacturer of your motherboard website and know the model of the motherboard and whether your computer is 32 or 64 bit and what operating system. Then you should be able to find a page with updates for your motherboard and it's related parts. You can do the same thing with a video card if you know the model and maker of the card. The manufacturer's website is the best place to find driver updates. Make it a habit to check for driver updates like monthly on a certain date of the month. Just an idea to throw out to you.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit Norton Core Security Plus 22.17.2.47 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Driverbooster threat warning

Or, Device Manager > Update check...although a newer driver doesn't mean a better driver for your machine. 

Kudos0

Re: Driverbooster threat warning

bjm_:

Or, Device Manager > Update check...although a newer driver doesn't mean a better driver for your machine. 

Absolutely. In a lot of cases if the driver works fine, stay with it. Iow, if it ain't broke.........

Windows 10 Home X 64 Norton Security Premium Current
Kudos0

Re: Driverbooster threat warning

I got this email below from Driver Booster....after Norton has said that it is Not a false positive I am not too sure about this software.   I have removed Driver Booster from my computer and unless Norton says it is definitely ok I will not reinstall it.

Dear Driver Booster user,

Thank you so much for your feedback. This is Hsien from IObit.

It is a false positive. Now we have been contacting Norton to solve this problem and we will inform you to re-install Driver Booster when it is done.

BTW, if you purchased PRO license code, please reply this email after this problem gets solved and we'll recoup the missing service days during this event.

Thank you a lot.

Sincerely,
Hsien

Kudos0

Re: Driverbooster threat warning

I just got this email from Iobit Driver Booster:

Dear Driver Booster user, 

Thank you so much for your feedback. This is Hsien from IObit.

We have been contacting Symantec/Norton recently and according to their response, we have removed promotion, IObit products recommendation, etc. from Driver Booster. Now the new Driver Booster is 100% clean but it is still reported and deleted by Norton.

Please follow the steps below to temporarily fix this problem:

1. Install the newest Driver Booster from http:// www. cd4o.com/drivers/debug/driver_booster_setup.exe

2. Scan with your Norton programs and see if the report happens again. If yes, please set as below:

  1. Start your Norton product.

  2. Click Settings.

  3. Depending on your Norton product, do one of the following:

    • For Norton 360 or Norton Security: Under Detailed Settings, click Antivirus. In the Settings window, click the Scans and Risks tab, and scroll down to Exclusions / Low Risks.

    • For Norton Internet Security or Norton AntiVirus: In the Computer tab, click AntiVirus and SONAR Exclusions.

  4. Do one of the following:

    • In the Items to Exclude from Scans row, click Configure. In the Scan Exclusions window, click Add.

    • In the Items to Exclude from Auto-Protect, SONAR and Download Intelligence Detection row, click Configure. In the Real Time Exclusions window, click Add.

  5. Select Folders or Files from the drop-down list, or click Add Folders or Add Files.

  6. In the Add Item dialog box, click the browse icon and select the item that you want to exclude from the scan and click OK.

  7. In the Add Item dialog box, click OK.

  8. Click Apply and OK.

Kudos0

Re: Driverbooster threat warning

Not sure if I am going to reinstall the Driver Booster or not after receiving the above email from them.   I want to be sure that it is something that will not cause a Low Threat on Norton Security.....I do not want to change settings in order to have Driver Booster again.

Kudos0

Re: Driverbooster threat warning

 A few days ago, also I received a "Threats Detected" from my NIS deleting my Driver Booster, I re-installed it from IOBIT website, but it was deleted again by NIS and I had to excluded it from Norton threat detection; I also submitted the IOBIT  and they told me it is a false report (false positive), but the Norton told me that the Driver Booster is a Potentially unwanted application that gives wrong information to the PS, but it is not done by well-known security software like Bitdefender internet security 2015, nor by the free Malwarbytes  anti malware.... how the Norton makes such claims? I am using the Driver Booster for several years having this experience that it is a useful software , even though the"" Norton Security"" had blocked the above Driver Booster in its firewall, this is the question whether the above problem is a real technical and malware problem discovered by the Norton or it is originated from financial competition between Norton and its financial competitor,in the meantime ,the people  lose confidence.

Kudos0

Re: Driverbooster threat warning

bjm_:

pic removed = Image deleted from IMCE

Kudos0

Re: Driverbooster threat warning

shahram:

[..] in the meantime ,the people lose confidence.

IObit removed promotion, IObit products recommendation, etc. from Driver Booster.  Now the new Driver Booster is 100% clean but it is still reported and deleted by Norton.

IObit changed the program ...which changed the fingerprint...IObit has to submit new whitelist request to Symantec...or IObit users have to submit false positive dispute.  

Norton is trying to protect you.  IObit worked with Norton and updated their program sans promotion offering. 

Now, the program needs to be re-analyzed / whitelisted.  This is business as usual for Norton and software vendors.

Kudos0

Re: Driverbooster threat warning

Hello bjm

That is going to be something you have to ask the Mods. We can usually see all screenshots right away, but I noticed you had one that was refused. I couldn't see what it was though.  I'll try to find out for you though,.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit Norton Core Security Plus 22.17.2.47 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Driverbooster threat warning

I can not post the screenshot which shows that also the Norton Security Firewall has blocked the Driver Booster with a warning red sign, in addition that before I had problem with IOBIT Advanced SystemCare pro that conflicted with Norton Power Erase Scan,  in this today's 'world under totalitarian globalized capital; the era of monopolization; the era of  merchandising vital needs of the people ,  there is not anything and sense as business, but also it is replaced with profit-seeking, capital accumulation, to put out the financial competitor with any cost along with daily increasing profiting on the people  assaulting on their rights and freedom.

Kudos1 Stats

Re: Driverbooster threat warning

Symantec advises options to avoid future detections of files:
1. Digitally sign binaries with Class-3 digital certificates (X.509) from a Certificate Authority.
2. Submit the software to Symantec’s white-listing program: https://submit.symantec.com/whitelist/
Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.

Kudos0

Re: Driverbooster threat warning

I have decided not to reinstall Driver Booster at all....even after I got the emails I posted earlier from them.

Kudos0

Re: Driverbooster threat warning

A friend told me his anti-virus software is having the same issue.  I don't believe this issue is Norton specific, since other software is raising the exact same flag.

Kudos0

Re: Driverbooster threat warning

the people are not able to daily buy an update driver like Driver Booster and then a security suite claims that it is Potentially Unwanted application and it is so difficult to update drivers manually searching in internet for hours, in addition to ,going to the manufacturer does not always exclude with mistake for the persons, please tell your experience, do you know with practice any other update drive like Driver Booster to do the same being secure?   

This thread is closed from further comment. Please visit the forum to start a new thread.