unvise32qt.exe may bot be spyware

[Geoffrey Mayer]

When I ran AntiSpyware with the 5753 definitions the
program told me that the IBIS Toolbar was installed and
indicated it is c:\windows\unvise32qt.exe. This file
indicates that it is "Installer VISE uninstall application
file" from MindVision and the best I can tell it is an
uninstall program for Apple QuickTime. There is no
reference to unvise32qt in my registry. Is this program
detected by name or by content? I donot see the program
running on my system nor has my browser been hijacked.
Thanks.

 

[alan]

| When I ran AntiSpyware with the 5753 definitions the
| program told me that the IBIS Toolbar was installed and
| indicated it is c:\windows\unvise32qt.exe. This file
| indicates that it is "Installer VISE uninstall application
| file" from MindVision and the best I can tell it is an
| uninstall program for Apple QuickTime. There is no
| reference to unvise32qt in my registry. Is this program
| detected by name or by content? I donot see the program
| running on my system nor has my browser been hijacked.
| Thanks.

I have exactly the same problem with the new signatures and a quick Google
seems to indicate you are correct about the link with QuickTime.

Alan

 

[Bill Sanderson]

I'm seeing posts in third-party forums indicating just what you both are
saying--that, in the case of this file relating to older versions of
QuickTime, this is a false positive.

I suspect the definitions folks have heard of this already, but I'll make
sure it gets to them.

Since this is apparently a leftover from an older version of QuickTime, it
would appear the removal should be harmless, unless that is your current
version....

 

[cak]

Same situation here. Picked up the same IBIS Toolbar
entry after today's update. (I believe it may be related
to the uninstall program for Quicktime, but don't know
for sure) Could this be a fp? Any other's with this
problem? Quarentine? Ignore?

 

[Bill Sanderson]

I quarantined it on my system, just on general principals. I'm reasonably
sure it is a false positive, but I haven't dug into what should constitute
IBIS toolbar and whether any of it exists on my system.

--

 

[Paul]

Same here. I trusted the scan result and removed
unvise32qt.exe. Will the removal of this file cripple
any program? If yes, how can I replace it? Install
Quicktime over the current Quicktime installation?

Paul

 

[Paul]

My brain is a little slow today. I forgot that I have
another PC on my network with the same version of Apple
Quicktime installed on it. I just copied the
unvise32qt.exe from that PC to this one. I will start
using the policy of Quarantine Only.

Paul

 

[Seagal]

the same thing is happened to me

 

[Robbie]

I guess seeing as Daz 3D uses Mindvision as their product installer if you have it set to
include an uninstaller you would get the same warning...I just checked and unvise is also
on my machine and I have the latest quicktime so maybe because of my Daz 3D programs.
Robbie

 

[ISWCKY]

I have seen the same thing on 11 systems.
Googled "unvise32qt" and found instructions for removing,
but other than this file, none of the other "symptoms"
exist.

 

[negster]

If you removed the quicktime uninstaller in MS-AS, it will remove the uninstall option for QuickTime in the in the Windows Control panel - A/R program screen. If you want to reinstate that ability, just download QuickTime 6.5.2 and install it. When you run MSAS again, set the user action to 'ignore', when unvise32qt.exe is detected as malware.

 

[Sally]

I downloaded the Quicktime 6.5.2 from
http://www.apple.com/downloads/macosx/apple/quicktime652fo
rwindows.html and installed it. It seemed to restore the
uninstall function. Now MSAS is detecting the IBIS
toolbar again. I do not understand the messages I get
when I select "ignore". It says something about ignore
all threats. I want it to ignore only this one file. What
do I do. Please give me a stepwise procedure. Thanks.

 

[Bill Sanderson]

There are two choices, ignore, and ignore always. In either case, the
choice relates only to the specific named threat - i.e. IBIS toolbar.

You really don't want to ignore always the IBIS toolbar--it is very real and
there are several live threads about it in these groups right now.

So--choose Ignore, or choose quarantine, and unquarantine the file after the
definitions are revised to eliminate this false positive.

--

 

[Scott M]

Geoffrey,

My MS Antispyware did the same thing as soon as Defs 5753
were installed. This has to be a false positive on
Microsoft's part. I checked the tech details for IBIS
toolbar and it makes no mention of an 'unvise32qt.exe'
file. I also run AdwareSE and it did not detect this.

Has anyone else had this pop up with Defs 5753.

Thanks

 

[Bill Sanderson]

This issue has been cleared for me by the 5755 definitions, available now.