Riskware/AusLogicsDriverUpdater Riskware/AusLogicsDriverUpdater is a generic detection for an unwanted application. Since this is a generic detection, Grayware samples that are detected as such may have varying behaviour. Below are some of its observed characteristics/behaviours: For this particular identification the application intends to be a utility called AusLogics Driver Updater .
The installation would oftentimes involve affecting changes on the user's settings, albeit in some cases these are presented as optional but are defaulted to enabled: adding the application on autostart, defaulted to On sending of anonymous information for their service, defaulted to On Samples were observed as well to connect to www.auslogics.com
Below are some illustration of the Installation: Figure 1: Defaulted On to AutoStart and Send Anonymous Information. Figure 2: An Ads included during installation. Figure 3: GUI of the application. Figure 4: The application requires you register/purchase before installing all the drivers. Following are some of the near/exact IOCs/file hash associated with this detection: Md5: DE200E48AD10E7AA99AC07F1B8B0301F Sha256: 1f1d398ed68d142ebe7314397ceae609b0734cc0af40f686f043d917323f6dfd
Make sure that your FortiGate/FortiClient system is using the latest AV database.
Quarantine/delete files that are detected and replace infected files with clean backup copies.
