No replies to this topic

[Metallica]

Content is republished with permission from Malwarebytes.

What is Vuze Driver Booster?

Vuze Driver Booster is a system optimizer that triggers our PUP detection rules. By doing so we offer users a choice to consider whether they want to use this software. More information can be found on our Malwarebytes Labs blog.

How do I know if I am affected by Vuze Driver Booster?

This is how the main screen of the system optimizer looks:



You will find these icons in your taskbar, your startmenu, and on your desktop:



and see this type of windows during install:







and this type of screens during operations:





You may see this entry in your list of installed programs:



How did Vuze Driver Booster get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website.



How do I remove Vuze Driver Booster?

Our program Malwarebytes can detect and remove this PUP.

• Please download Malwarebytes for Windows to your desktop.
• Double-click MBSetup.exe and follow the prompts to install the program.
• When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
• Click on the Get started button.
• Click Scan to start a Threat Scan.
• When the scan is finished click Quarantine to remove the found threats.
• Reboot the system if prompted to complete the removal process.

Is there anything else I need to do to get rid of Vuze Driver Booster?

• No, Malwarebytes removes Vuze Driver Booster completely.

What if I want to keep Vuze Driver Booster?

Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Heres how to do it.

• Open Malwarebytes for Windows.
• Click the Detection History
• Click the Allow List
• To add an item to the Allow List, click Add.
• Select the exclusion type Allow a file or folder and use the Select a folder button to select the main folder for the software that you wish to keep.
• Repeat this for any secondary files or folder(s) that belong to the software.

If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you in dealing with this system optimizer.

As you can see below the full version of Malwarebytes would have warned you against the Vuze Driver Booster installer.

Technical details for experts

You may see these entries in FRST logs:

HKCU\...\Run: [Vuze Driver Booster] => C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe [808432 2020-09-09] (Azureus Software, Inc. -> Azureus Software, Inc.)
C:\Users\{username}\Desktop\Vuze Driver Booster.lnk
C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Driver Booster

Vuze Driver Booster 20.8.19.20 (HKCU\...\Vuze Driver Booster) (Version: 20.8.19.20 - Azureus Software, Inc.)

Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster
       Adds the file Uninstall.exe"="4/15/2021 10:51 AM, 124617 bytes, A
       Adds the file VuzeDriverBooster.exe"="9/9/2020 4:39 PM, 808432 bytes, A
       Adds the file VuzeDriverBooster.exe.config"="8/19/2020 11:50 AM, 190 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Driver Booster
       Adds the file Vuze Driver Booster.lnk"="4/15/2021 10:51 AM, 2291 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file Vuze Driver Booster.lnk"="4/15/2021 10:51 AM, 2277 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
       "Vuze Driver Booster"="REG_SZ", ""C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe" /minimized"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vuze Driver Booster]
       "(Default)"="REG_SZ", "C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster"
       "DisplayIcon"="REG_SZ", "C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe,0"
       "DisplayName"="REG_SZ", "Vuze Driver Booster 20.8.19.20"
       "DisplayVersion"="REG_SZ", "20.8.19.20"
       "DistID"="REG_SZ", "vdb"
       "InstallDate"="REG_SZ", "20210415"
       "InstallDir"="REG_SZ", "C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\"
       "InstallKey"="REG_SZ", "{88558362-6225-4CBA-AC6A-308A3D82B4C5}"
       "InstallLocation"="REG_SZ", "C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\"
       "MainApp"="REG_SZ", "C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe"
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Azureus Software, Inc."
       "UninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\Uninstall.exe""
       "URLInfoAbout"="REG_SZ", "http://www.vuzedriverbooster.com"
       "VersionMajor"="REG_SZ", "20"
       "VersionMinor"="REG_SZ", "8"
    [HKEY_CURRENT_USER\Software\Vuze Driver Booster]
       "last_scan_date"="REG_SZ", "Thursday, April 15, 2021 10:53 AM"
       "LicenseKey"="REG_SZ", "Tkk+PDs+OEkhPz00SCFNTz8/ITxNP0khSTo0OzQ7Pzs7SDQ8"
       "nbr_outdt_drvs"="REG_SZ", "1"
       "os_version_name"="REG_SZ", "Microsoft Windows 7 Ultimate "
       "Version"="REG_SZ", "dHJpYWw="

Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/15/21
Scan Time: 11:00 AM
Log File: 04219ec4-9dc9-11eb-9269-080027235d76.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1251
Update Package Version: 1.0.39431
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}-PC\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 233947
Threats Detected: 15
Threats Quarantined: 15
Time Elapsed: 3 min, 11 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
PUP.Optional.VuzeDriverBooster, C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe, Quarantined, 2750, 930766, , , , , 0EB14EA6EB1EF61269E3914CED9D6894, ABD7CB84781A01058B8BAE2A1599FA79BA517EDAD0A4B892ACF225F44D2A8188

Module: 1
PUP.Optional.VuzeDriverBooster, C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe, Quarantined, 2750, 930766, , , , , 0EB14EA6EB1EF61269E3914CED9D6894, ABD7CB84781A01058B8BAE2A1599FA79BA517EDAD0A4B892ACF225F44D2A8188

Registry Key: 4
PUP.Optional.VuzeDriverBooster, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vuze Driver Booster, Quarantined, 2750, 930773, 1.0.39431, , ame, , , 
PUP.Optional.VuzeDriverBooster, HKLM\SOFTWARE\MICROSOFT\TRACING\VuzeDriverBooster_RASAPI32, Quarantined, 2750, 930771, 1.0.39431, , ame, , , 
PUP.Optional.VuzeDriverBooster, HKCU\SOFTWARE\Vuze Driver Booster, Quarantined, 2750, 930774, 1.0.39431, , ame, , , 
PUP.Optional.VuzeDriverBooster, HKLM\SOFTWARE\MICROSOFT\TRACING\VuzeDriverBooster_RASMANCS, Quarantined, 2750, 930771, 1.0.39431, , ame, , , 

Registry Value: 1
PUP.Optional.VuzeDriverBooster, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Vuze Driver Booster, Quarantined, 2750, 930766, , , , , , 

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 2
PUP.Optional.VuzeDriverBooster, C:\USERS\{username}\APPDATA\LOCAL\PROGRAMS\VUZE DRIVER BOOSTER, Quarantined, 2750, 930766, 1.0.39431, , ame, , , 
PUP.Optional.VuzeDriverBooster, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\VUZE DRIVER BOOSTER, Quarantined, 2750, 930769, 1.0.39431, , ame, , , 

File: 6
PUP.Optional.VuzeDriverBooster, C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\Uninstall.exe, Quarantined, 2750, 930766, , , , , 35ADCE16705E2948997D043C19DC6872, 8F9262BB62A69C4770F95B65365C4636BFDF8D2DDA62F5115178EB853BDD4079
PUP.Optional.VuzeDriverBooster, C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe, Quarantined, 2750, 930766, , , , , 0EB14EA6EB1EF61269E3914CED9D6894, ABD7CB84781A01058B8BAE2A1599FA79BA517EDAD0A4B892ACF225F44D2A8188
PUP.Optional.VuzeDriverBooster, C:\Users\{username}\AppData\Local\Programs\Vuze Driver Booster\VuzeDriverBooster.exe.config, Quarantined, 2750, 930766, , , , , 2381FCE90EC6F48AA42E60A4B918BA37, D74652EB078B1D6FA06D39D8872A1633172415D492FDAEEE648B0CCB569FEBD1
PUP.Optional.VuzeDriverBooster, C:\USERS\{username}\Desktop\Vuze Driver Booster.lnk, Quarantined, 2750, 930766, , , , , CAD9F87CC4A6D868BC26C8359BC0E504, 11C625964BE249A6B785DFAFA0F39EAEAF0A836C77DAC3523BAB4E91C7319493
PUP.Optional.VuzeDriverBooster, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Driver Booster\Vuze Driver Booster.lnk, Quarantined, 2750, 930769, , , , , AC8D88046B07B8E7F1173B8D3B203203, 65222D04E68FF0A1D9253D5B11674E7E84D13330B48A50695B34B8814758E6E7
Generic.Malware/Suspicious, C:\USERS\{username}\DESKTOP\VUZEDRIVERBOOSTERSETUP.EXE, Quarantined, 0, 392686, 1.0.39431, , shuriken, , E78F9CDF0B31281D8F7E30F1817C9CD2, 8A72AED19B7266EC8A3AD4C7BD4819488B9F80F3D7035C7F04631E557DC3B42A

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes could have protected your computer against this potentially unwanted program.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.