While attempting to install Ghostery on a computer protected with Vipre Antivirus, the install for both IE and Firefox is blocked by Vipre reporting that a known bad file was blocked from opening. The specific file is listed as bringtofront.exe and is reported in the Vipre category of (Adware (General)).
Is Ghostery compromised or is this a false detection?
Help get this topic noticed by sharing it on
Twitter,
Facebook, or email.
Twitter,
Facebook, or email.
-
Hi Michael,
Thanks for using Ghostery!
There is a known False positive for the IE download due to the crossrider framework we use, but its somewhat rare for the firefox install to be flagged. "bringtofront.exe" has nothing to do with Ghostery.. so I'm not sure what that is. -
-
Thanks Pete. Where I'm confused is the the bringtofront.exe file is what Viupre blocks as soon as I click on the download link to install Ghostery on this one machine.
-
-
Where are you downloading Ghostery from?
According to VirusTotal, VIPRE shouldn't be detecting anything.
-
-
Download is from this page: http://www.ghostery.com/download
I'm going to try this on a different machine also protected by Vipre. There is a possibility that the machine with the install problem is compromised with an adware downloader. There are a number of 'daily deals' sites that are associated with bringtofront.exe and I suspect something may be getting triggered.
Just to be clear, the bringtofront.exe detection occurs when installing on Firefox.-
Ghostery for Firefox contains no binary executable code whatsoever. No EXEs, no DLLs, no BS. It's distributed through AMO, which has a strong anti-tampering mechanism. If you're seeing malware detections, you've already been compromised.
-
-
-
-
-
My thought exactly. Unfortunately, the machine belongs to a client and we'll need to do some remediation before we can proceed with the install of Ghostery.
Thanks for your assistance. -
Loading Profile...




EMPLOYEE
CHAMP
