Malwarebytes False Positive - Geek Buddy Malware for C1 Comm Agent

Products ITarian Endpoint Manager
1

MBAM is reporting on all machines I have come in contact with that parts of C1 Comm Agent are Geek Buddy malware.

Please advise.

2

@azon2111

We will reach you via e-mail in order to further investigate the issue you are encountering.

3

Some good analysis and hopefully impartial advice to be found at http://www.shouldiremoveit.com/GeekBuddy-14240-program.aspx
I cannot comment on GeekBuddy itself as have not ever dealt with it.

4

its a False Positive. It is not malware.

5

GeekBuddy is a PUP that gets bundled with the free Comodo AV. Something in the C1 software is using either a common file or registry entry.

6

that is the problem with “signature” based legacy antivirus products.
time to move to CPU Enforced OS Virtualization for protection against malware, rather than 1980s technology of signature based AVs :wink: