Trojan yes/no

Learn about Computer Security Leak Testing/Attacks/Vulnerability Research
#1

Hello, im using Holdemmanager and Table Ninja (Vista Home Prem 64 bit) and getting warnings only from CIS: COMODO Internet Security Protokolle

Tabelle

:

Antivirus-Protokoll

Erstellungsdatum

:

19.11.2009 01:53:48

Zeitraum für Protokoll

:

Die letzten 30 Tage

Anzahl der Einträge

:

20
Datum/Uhrzeit Aktion Ort Name der Malware Status
11/08/09 00:00:36 Erkennen C:\Program Files (x86)\Dell Support Center\bin\sprtsched.dll TrojWare.Win32.TrojanDownloader.Small.~MEM[at]63463780 Erfolgreich
11/08/09 00:00:51 Erkennen C:\Program Files (x86)\Dell Support Center\bin\sprtsched.dll TrojWare.Win32.TrojanDownloader.Small.~MEM[at]63463780 Erfolgreich
11/08/09 00:31:14 Quarantäne C:\Program Files (x86)\Dell Support Center\bin\sprtsched.dll TrojWare.Win32.TrojanDownloader.Small.~MEM[at]63463780 Erfolgreich
11/08/09 00:31:14 Quarantäne C:\Program Files (x86)\Dell Support Center\bin\sprtsched.dll TrojWare.Win32.TrojanDownloader.Small.~MEM[at]63463780 Erfolgreich
11/08/09 13:23:38 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]PROGRAMFILES[at]\RVG Software\Holdem Manager\HMHud.exe Backdoor.Win32.Poison.auuu[at]79016147 Erfolgreich
11/13/09 20:01:06 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]PROGRAMFILES[at]\RVG Software\Holdem Manager\HMHud.exe Backdoor.Win32.Poison.auuu[at]79016147 Erfolgreich
11/13/09 20:03:06 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]SYSTEM[at]\conime.exe UnclassifiedMalware[at]80003923 Erfolgreich
11/13/09 20:05:07 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]WINDIR[at]\Microsoft.NET\Framework\v2.0.50727\cvtres.exe UnclassifiedMalware[at]79449800 Erfolgreich
11/13/09 21:25:48 Erkennen C:\Program Files (x86)\TableNinjaFT\TableNinjaFT.exe TrojWare.Win32.Downloader.Geral.~D[at]36897975 Erfolgreich
11/13/09 21:25:58 Quarantäne C:\Program Files (x86)\TableNinjaFT\TableNinjaFT.exe TrojWare.Win32.Downloader.Geral.~D[at]36897975 Erfolgreich
11/13/09 23:30:38 Erkennen C:\Program Files (x86)\Steam\bin\SteamService.dll Backdoor.Win32.DarksRat.R[at]18515857 Erfolgreich
11/13/09 23:38:13 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]SYSTEM[at]\conime.exe UnclassifiedMalware[at]80003923 Erfolgreich
11/13/09 23:38:13 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]PROGRAMFILES[at]\RVG Software\Holdem Manager\HMHud.exe Backdoor.Win32.Poison.auuu[at]79016147 Erfolgreich
11/13/09 23:38:13 Erkennen C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]WINDIR[at]\Microsoft.NET\Framework\v2.0.50727\cvtres.exe UnclassifiedMalware[at]79449800 Erfolgreich
11/14/09 00:05:39 Ignorieren C:\Program Files (x86)\Steam\bin\SteamService.dll Backdoor.Win32.DarksRat.R[at]18515857 Erfolgreich
11/14/09 00:05:39 Ignorieren C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]SYSTEM[at]\conime.exe UnclassifiedMalware[at]80003923 Erfolgreich
11/14/09 00:05:39 Ignorieren C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]PROGRAMFILES[at]\RVG Software\Holdem Manager\HMHud.exe Backdoor.Win32.Poison.auuu[at]79016147 Erfolgreich
11/14/09 00:05:39 Ignorieren C:\Users\Seer\AppData\Local\Xenocode\ApplianceCaches\HoldemManager.exe_v7BC20518\Native\STUBEXE[at]WINDIR[at]\Microsoft.NET\Framework\v2.0.50727\cvtres.exe UnclassifiedMalware[at]79449800 Erfolgreich
11/17/09 22:12:15 Erkennen C:\Program Files (x86)\TableNinjaFT\TableNinjaFT.exe TrojWare.Win32.TrojanDownloader.Small.~MEM[at]63463780 Erfolgreich
11/17/09 22:12:24 Ignorieren C:\Program Files (x86)\TableNinjaFT\TableNinjaFT.exe TrojWare.Win32.TrojanDownloader.Small.~MEM[at]63463780 Erfolgreich
Ende des Berichts

now im wondering if these warnings does any harm or not, cause no other Anti Vir or Anti Spyware gives me any warnings. As im guessing these are just functions of both apps that are genrating these warnings i decided to ignore em to use those apps. Now i just wanna be ensured i dont have any “Real Trojan or Virus Infections on my pc” (scanned with: Malwarebytes AntiMW, Spybot, hijackthis). Thx in advance , daseer

#2

I’m having the same issues. I’ve had this for about a week. This downloader is a redirect bug that causes issues when doing online search engine queries. If you type something into your search engine, it’ll redirect you to one of a handful of sites that they want you to go to. Windows Defender can identify it, but it won’t get rid of it. I have a corporate edition of NORTON and it also seems to be blocking any updates. I uninstalled NORTON and tried to reinstall it but it blocked the LIVE UPDATE install, so now it’s a couple years old and won’t update. Initially I thought it was profile specific as it wouldn’t do anything to other profiles on my system, but today it reared it’s ugly head. It’s a real pain…

#3

Thx very much for ure fast reply and ure Infos Clock :-TU As AVIRA + Comodo Firewall was my first setup (and i was also happy with it) I`ll switch back to this one (cant find Comodod firewall stanalone thats
why i installed it with the CIS AV- any tips where i can find the Firewall alone ? Im a Computer Noob so thx in advance again :wink:

#4

Thx Alot Clock :slight_smile: !