home

Geek Squad

Publisher Information

Geek Squad is a software publisher located in Richfield, Minnesota in the United States*. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
8/25/2009 7:00:00 PM

Valid to:
10/20/2012 6:59:59 PM

Subject:
CN=Geek Squad, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Geek Squad, L=Richfield, S=Minnesota, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
44980722cad26153548bcfffe3b23d73

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Agnitum Outpost
Packed/PECompact
50.00%

Clam AntiVirus
PUA.Packed.PECompact-1
40.00%

F-Prot
W32/Heuristic-210, W32/Slugin.B
10.00%

K7 AntiVirus
Virus
5.00%

Quick Heal
(Suspicious) - DNAScan
5.00%

Rising Antivirus
Suspicious
5.00%

VIPRE Antivirus
Threat.4314870
5.00%

Microsoft Security Essentials
Threat.Undefined
5.00%

avast!
Win32:Patched-JI
5.00%

AVG
Win32/Slugin.A
5.00%

0 / 68
CAT.exe (Geek Squad MRI Toolset by Geek Squad)  (7dc8555ef37377c77d823e48660a5fe5)

0 / 68
SystemUpdater.exe (MRI System Updater by Geek Squad)  (1137048419dc5982034d646c135daf39)

0 / 68
ResetFileAttributes.exe (Reset File Attributes by Geek Squad)  (149fdcd55738f57ab53fab23a15839ec)

11 / 68    (Malware)
GSBootSvc.exe (GSBootSvc by Geek Squad)  (74239f1167ee1140839c35626af29028)

0 / 68
startupmanager.dll (MRI Startup Manager by Geek Squad)  (cbf29c4b0b79ccab3600a15ab87454fc)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (3b86ff80b7c14fbce807f862990c5102)

0 / 68
startupmanager.dll (MRI Startup Manager by Geek Squad)  (e2e05b0f4a423313f2aa60e407bad2c9)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (aea45a6ae63005f379ca2811a283812e)

0 / 68
GSSkin.dll (GSSkin by Geek Squad)  (eda741348231f04ba7603dadc8dd0a99)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (30c725a382c1625419ec64eb7a4017b4)

0 / 68
GSCommon.dll (GSCommon by Geek Squad)  (9a87d64bc9f18c5fd3feda3c87475ef7)

0 / 68
startupmanager.dll (MRI Startup Manager by Geek Squad)  (693792f5f13df9c8f3f089a31138c74e)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (1cfbe53d1445b358435e1b28106e9af2)

0 / 68
startupmanager.dll (MRI Startup Manager by Geek Squad)  (73fc119cd8c09fd21e448b6e8d69b4d4)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (1fc2f1fabc4d38b62341bddd224af414)

0 / 68
startupmanager.dll (MRI Startup Manager by Geek Squad)  (9c32e89bf989220b91908034683b9302)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (262e6300f206cbd96f438f00378a17d4)

0 / 68
startupmanager.dll (MRI Startup Manager by Geek Squad)  (1af2a2c7aff886c4ccfac75b2ff77ce2)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (64217a06cfafd6eab84d2d0a35b8f7eb)

1 / 68
StartupManager.exe (MRI Startup Manager by Geek Squad)  (f08ba96fb73cb7601982bb1f7ae587f9)

0 / 68
GSSkin.dll (GSSkin by Geek Squad)  (e3e8eb50a1ae106265875bd793d7d010)

0 / 68
GSLang.dll (GSLang by Geek Squad)  (2525d8b5ea11e4c828808855fddb8a93)

1 / 68
GSCommon.dll (GSCommon by Geek Squad)  (739a19d8de5f12ac524c5e20188844ab)

1 / 68
MRI.exe (MRI Core Application by Geek Squad)  (76c3a41b4b8987b58ae89509f8ae0216)

0 / 68
RestoreBFEandBFFs.exe (RestoreBFEandBFFs by Geek Squad)  (bc62135f00fe7912c492ddbc0f4cc21c)

1 / 68
StartupManager.exe (MRI Startup Manager by Geek Squad)  (c1e713773f1acc293250dd69fa8e366d)

0 / 68
FMOD.exe (MRI File Manager On Duty by Geek Squad)  (ead8aeb3fd7020ec3ccaca7c42fe7620)

1 / 68
MRI.exe (MRI Core Application by Geek Squad)  (359212491b78b7bf840fd0f8727077b7)

0 / 68
resetfileattributesx64.exe (Reset File Attributes by Geek Squad)  (92af9eb72f5d604c1683657bd96acfa4)

0 / 68
RestoreDefaultServices.exe (RestoreDefaultServices.exe by Geek Squad)  (8fdd9e39bb3a3ec74eaa88821760de2b)

 
Latest 30 of 89 files

The following certificate is also signed by Geek Squad.

6DE4958B0E3FDFA2D023A2CF97A61C47  (Oct 20, 2008 to Oct 21, 2009)

* Note, the details and description above are based on the code signing digital signature issued to Geek Squad by VeriSign, Inc. on August 25, 2009 with the serial number '44980722cad26153548bcfffe3b23d73'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.