internet gamebox

dadpad · Feb 8, 2008

A friend sent me this. Not sure if its common knowledge. I figured you people would know what to do if its not.

100% Free Flash Games
From Arcade to Adventure to Sports No Sign Up, no Passwords, no Cost
www. InternetGamebox. com

Internet Gamebox is owned by GAD Network, which is a known spyware supplier. Their setup package, which is needed to play their free online games, reportedly installs a hard to remove rootkit.

‘I duplicated one of my Virtual Server images and ran the Internet Gamebox installation on it. I had Filemon running on the background logging newly created files and modifications. The installation created a file named 'noffmmtudd.exe' in the windows\system32 directory and executed it. This file didn't show up in Explorer with 'show hidden/system files' turned on. A registry search didn't find a mention of this file either.

Then I turned off the virtual machine and added the disk as a second (non-booting) disk to a clean virtual machine. The file named 'noffmmtudd.exe' was suddenly visible with Explorer in the windows\system32 directory, along with some data files also starting with 'noffmmtudd'.

After rebooting the infected virtual machine the mentioned files were still not visible in Explorer or the registry. I ran the uninstaller which said it had removed all components of Internet Gamebox.
Loading the disk in the clean virtual machine again showed that the files were still there. I then renamed the exe file.

After rebooting the infected virtual machine the renamed exe and data files finally showed up in Explorer. A registry search came up with 'noffmmtudd.exe' being called on startup.

I hope this proves that Internet Gamebox does indeed install a rootkit. I don't know how to check what the rootkit actually does but it can't be good when it tries to hide itself.’

Do NOT download this crapware!
Click to expand...

chaslang · Feb 9, 2008

Yes it is malware. Sometime classified as Adware/NaviPromo.

What is it that you want us to do? Did you install this on your PC?

Log in or Sign up

internet gamebox

dadpad Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

internet gamebox

dadpad Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches