![]() |
|
#1
|
|||
|
|||
|
Today I scanned my computer using nod32 and antispyware pro.
Antispyware Pro picked up a trojan called dropper/gen. Just wondering why nod32 would miss this. Would it likely be a false positive? I noticed that its attached to a file called alawargameboxwebsetup.exe I believed I downloaded a game from www.alawar.com, a gaming portal. |
|
#2
|
||||
|
||||
|
Quote:
Antispyware pro is a rogue app. Do you mean SuperAntiSpyware Pro?
__________________
May you fly straight to heaven - but if you go to Hades - may Lethe run with Guinness |
|
#3
|
|||
|
|||
|
Yes, thats the one I use.
I did a bit of research into alawar and its not the only trojan they've been distributing. http://www.siteadvisor.com/sites/alawar.com/downloads/ win32 & backdoors. |
|
#4
|
||||
|
||||
|
It's a SAS false positive. I downloaded a game which included this web setup to inspect the file which is clean. Also, no AV software is detecting it out of 39 AV's tested. After virtuilization, the file seems harmless.
edit: I just checked the NAI site advisor, I will download one of those games to test, as I tested the Beach Party game. |
|
#5
|
||||
|
||||
|
I could only locate the KinderGarten game from the NAI listed website, and the websetup in that has the same checksum as in the other game.
Could you please locate the exact game you installed. |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|