kav 6 detects everest poker as win32.casino.t

Discussion in 'other anti-virus software' started by hawkeen, Jul 9, 2006.

Thread Status:
Not open for further replies.
  1. hawkeen

    hawkeen Registered Member

    Joined:
    Apr 9, 2006
    Posts:
    78
    Kav 6 says the http page is malicious, and the exe is malicious. What is up.

    Is this a false positive? It is a poker site and I have contacted everest poker and they say nothing is wrong with their EXE but that some AVs will falsely detect poker/casino software as viruses/adware.

    the url is http://www.everestpoker.com. Could someone please advise.

    cheers
    Hawk
     
  2. TonyW

    TonyW Registered Member

    Joined:
    Oct 12, 2005
    Posts:
    2,634
    Location:
    UK
    I don't get an alert for the page, but on attempting to download the .exe file, I am alerted to it being categorised as "not-a-virus:AdWare.Win32.Casino.t". If you believe the file to be a false positive, send the file in a password-protected zip archive to newvirus@kaspersky.com. Remember to include the password in the email.
     
  3. hawkeen

    hawkeen Registered Member

    Joined:
    Apr 9, 2006
    Posts:
    78
    I forgot to mention that I have KAV 6 set on highest setting possible for all scanning.


    cheers
    Hawk
     
  4. dah145

    dah145 Registered Member

    Joined:
    Jul 3, 2006
    Posts:
    262
    Location:
    n/a
    The best way to know if is a FP is to send it to Kas Labs. :D
     
  5. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Try running the EXE through Jotti's Virus Scan Service at http://virusscan.jotti.org

    If lots of AVs are detecting it as Riskware, then it is not an FP.
     
  6. ASpace

    ASpace Guest

    I just had a look at this page . It seems malicious , though . Should not be a FP:thumb:
     
  7. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    yes..it's an adware. ;)
     
  8. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,499
    Yep....even AVG detects that one :rolleyes:
    ellison
     
  9. Mele20

    Mele20 Former Poster

    Joined:
    Apr 29, 2002
    Posts:
    2,495
    Location:
    Hilo, Hawaii
    I didn't get any alert on the page but got a download error when trying to download and it could not be downloaded on Firefox. I also got KAV alert on four temp files.
     

    Attached Files:

  10. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    I've downloaded it using FF with no problems. ;)
    I'm using NOD32 which doesn't detect it. Perhaps KAV blocked it for you. :) Are u using KAV 6?
     
  11. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Can anybody plz upload it to Jotti or virus total to have a comparison?
     
  12. chia

    chia Registered Member

    Joined:
    Jun 10, 2004
    Posts:
    89
    VirusTotal...
     

    Attached Files:

  13. Mele20

    Mele20 Former Poster

    Joined:
    Apr 29, 2002
    Posts:
    2,495
    Location:
    Hilo, Hawaii

    The error was one I haven't seen before so I thought it had to do with Fx. But I guess not. Evidently, KAV 6 blocked it as you said and that is what produced the Fx download error. Right on Kaspersky!
     
  14. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan

    Thanks Chia.
     
  15. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    To my best knowledge, it's not malicious and the vendor asked us to remove detection.
     
  16. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    thanks for telling this Marcos. ;)
     
  17. Inspector Clouseau

    Inspector Clouseau AV Expert

    Joined:
    Apr 2, 2006
    Posts:
    1,329
    Location:
    Maidenhead, UK
    Yub it is NOT malicious.
     
  18. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,499
    Hi inspector...
    Did fprot4 detect it as malicious this morning?.I could have sworn it detected it at virus total (an hour or two before chias post).Then again i have had a hectic day and my eyesight is not as good as it was. ;)
    ellison
    EDIT....Actually it might have been cowabanga installer that it detected...seems my memorys not as good as it was either :(
     
    Last edited: Jul 10, 2006
  19. Inspector Clouseau

    Inspector Clouseau AV Expert

    Joined:
    Apr 2, 2006
    Posts:
    1,329
    Location:
    Maidenhead, UK
    This dialer was defenitely not detected
     
Loading...
Thread Status:
Not open for further replies.