Terms & Conditions

Internet Magazine

Non–US new players
Get five 2+2 books


Order Books
Book Translations
Forum Login
 
 
Expand All   Collapse All

 Two Plus Two 
2+2 Magazine Forum
Special Sklansky Forum
2+2 Pokercast
About the Forums

 General Poker Discussion 
Beginners Questions
Books and Publications
Televised Poker
News, Views, and Gossip
Brick and Mortar
Home Poker
Beats, Brags, and Variance
Poker Theory
Poker Legislation

 Coaching/Training 
StoxPoker
DeucesCracked

 German Forums 
Poker Allgemein
Strategie: Holdem NL cash
Strategie: Sonstige
Internet/Online
BBV
Small Talk
German Poker News

 French Forums 
Forum francophone
Strategie
BBV (French)

 Limit Texas Hold'em 
High Stakes Limit
Medium Stakes Limit
Small Stakes Limit
Micro Stakes Limit
Mid-High Short-handed
Small Stakes Shorthanded
Limit––>NL

 PL/NL Texas Hold'em 
High Stakes
Medium Stakes
Small Stakes
Micro Stakes
Small-High Full Ring
Micro Full Ring

 Tournament Poker 
Small Stakes MTT
High Stakes MTT
MTT Community
STT Strategy
Tournament Circuit

 Other Poker 
Omaha/8
Omaha High
Stud
Heads Up Poker
Other Poker Games

 General Gambling 
Probability
Psychology
Sports Betting
Other Gambling Games
Entertainment Betting

 Internet Gambling 
Internet Gambling
Internet Bonuses
Affiliates/RakeBack
Software

 2+2 Communities 
Other Other Topics
The Lounge: Discussion+Review
El Diablo's General Discussion
BBV4Life

 Other Topics 
Golf
Sporting Events
Politics
Business, Finance, and Investing
Travel
Science, Math, and Philosophy
Health and Fitness
Student Life
Puzzles and Other Games
Video Games
Laughs or Links!
Computer Technical Help
Sponsored Support Forums
RakebackNetwork
RakeReduction.com
Other Links
Books
Authors
Abbreviations
Calendar
Order Books
Books by Others
Favorite Links
Feedback
Advertising Information
Home
Posting Hints
Privacy Notice
Forum Archives

The 2+2 Forums

Before using this Forum, please refer to the Terms and Conditions (Last modified: 2/26/2006)

Be sure to read the   Two Plus Two Internet Magazine

This is an archive. The main forums are here

These forums are read only.


 
UBB.threads™ Groupee, Inc.

Internet Gambling >> Affiliates/RakeBack

Pages: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | >> (show all)
Unabridged
old hand


Reged: 06/12/05
Posts: 968
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: Red Lion]
      #5797564 - 05/12/06 06:33 PM

Quote:

Yes it is not raketrackers fault that this happened. No compensation needed.





how is it not their fault?


Post Extras: Print Post   Remind Me!   Notify Moderator  
forshure
old hand


Reged: 09/26/05
Posts: 1054
Loc: UIUC
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: rt1]
      #5797574 - 05/12/06 06:34 PM

Quote:

This virus could also come bundled with other poker applications




What other applications can/is it bundled with?


Post Extras: Print Post   Remind Me!   Notify Moderator  
joe c
enthusiast


Reged: 04/12/06
Posts: 219
Loc: If I ever left the poker table...
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: cnfuzzd]
      #5797595 - 05/12/06 06:35 PM

personally I find it commendable that you are coming forward with this information. Seems like it could have been easily hidden, denied, covered-up or whatever.

FWIW, I downloaded this program in February, and am not infected. I still have a copy if it would be helpful for anything.


Post Extras: Print Post   Remind Me!   Notify Moderator  
ColdCaller
the old kyleb


Reged: 11/09/05
Posts: 2272
Loc: [censored] beedogs
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: Unabridged]
      #5797609 - 05/12/06 06:37 PM

Quote:

Quote:

Yes it is not raketrackers fault that this happened. No compensation needed.





how is it not their fault?




Ultimately the user is responsible for all programs they download. RakeTracker probably never guaranteed the third-party program to be free of viruses or trojan horses.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Unabridged
old hand


Reged: 06/12/05
Posts: 968
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: ColdCaller]
      #5797710 - 05/12/06 06:48 PM

Quote:

Quote:

Quote:

Yes it is not raketrackers fault that this happened. No compensation needed.





how is it not their fault?




Ultimately the user is responsible for all programs they download. RakeTracker probably never guaranteed the third-party program to be free of viruses or trojan horses.




yes, we all at fault for installing this. but this is not third party software raketracker put up on its site, it is their software with their name on it and on their reputation i assumed it was safe(ie they reviewed the source code)


Post Extras: Print Post   Remind Me!   Notify Moderator  
*TT*
dresses better than he plays


Reged: 04/28/04
Posts: 17198
Loc: Vehicle Chooser For Life!
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: rt1]
      #5797822 - 05/12/06 07:00 PM

Here is the response from my submission to Symantec this morning when the claim was first made. RBCalc.exe's signature is now added to their anti-virus definitions.

Contrary to RT's statement, the version I submitted was downloaded on 4/22 Rev 1.6 if I recall correctly.

Quote:

We have analyzed your submission. The following is a report of our findings for each file you have submitted:

filename: D:\Poker\Installers\RBCalc.exe
machine: XXXXXXXX (edited for my security)
result: This file is detected as Trojan.Dropper. http://www.symantec.com/avcenter/venc/data/trojan.dropper.html

Developer notes:
D:\Poker\Installers\RBCalc.exe is non-repairable threat. Please delete this file and replace it if necessary.

The submitted file drops comclg32.dll (Backdoor.Trojan), d3dclsrv.dll (infostealer), utlsrv.exe (infostealer), and ndsdavsrv.sys (Hacktool.Rootkit).

Symantec Security Response has determined that the sample(s) that you provided are infected with a virus, worm, or Trojan. We have created RapidRelease definitions that will detect this threat. Please follow the instruction at the end of this email message to download and install the latest RapidRelease definitions.
Symantec is now building a new set of definitions to include the threat you have submitted. The approximate time to complete this process is one hour. We recommend checking the ftp site periodically over the next 60 to 90 minutes to download these definitions as soon as they are available.

Downloading and Installing RapidRelease Definitions:
1. Open your Web browser. If you are using a dial-up connection, connect to any Web site, such as: http://securityresponse.symantec.com/
2. Copy and paste the address ftp://ftp.symantec.com/public/english_us...lease/sequence/ into the address bar of your Web browser and then press Enter.(this could take a minute or so if you have a slow connection) 3. Now select 53989 folder or a higher. Open the folder.
4. Select the file symrapidreleasedefsx86.exe 5. When a download dialog box appears, save the file to the Windows desktop.
6. Double-click the downloaded file and follow the prompts.


Virus definition detail:

Sequence Number: 53989
Defs Version: 80512an
Extended Version: 05/12/2006 rev.40
----------------------------------------------------------------------
This message was generated by Symantec Security Response automation

Should you have any questions about your submission, please contact our regional technical support from the Symantec website
(http://www.symantec.com/techsupp/)
and give them the tracking number in the subject of this message.





TT


Post Extras: Print Post   Remind Me!   Notify Moderator  
Inthacup
Carpal \'Tunnel


Reged: 09/04/02
Posts: 4502
Loc: Inthacup
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: *TT*]
      #5797882 - 05/12/06 07:06 PM

Here is the response from my submission to Symantec this morning when the claim was first made. RBCalc.exe's signature is now added to their anti-virus definitions.

Awesome. It's good to know that AV companies are already responding. Thanks for sharing TT.

Cup


Post Extras: Print Post   Remind Me!   Notify Moderator  
rt1
professional balla


Reged: 06/03/04
Posts: 907
Loc: MN!!!!!!!!!!!!!!!
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: *TT*]
      #5797930 - 05/12/06 07:11 PM

Thanks TT. I took the dates out of my post... since we are no longer supporting this software we will assume that ALL version are bad.

Post Extras: Print Post   Remind Me!   Notify Moderator  
*TT*
dresses better than he plays


Reged: 04/28/04
Posts: 17198
Loc: Vehicle Chooser For Life!
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: rt1]
      #5797933 - 05/12/06 07:11 PM

Question:

Since theft was involved over the internet this is a federal crime, in fact it may be an international crime. What is Rake Tracker doing to assure the proper authorities are aware? Is Rake Tracker notifying their vendor partners so they can do their best to track any third party beneficiaries?

Lets not beat around the bush, your developer is a criminal in my eyes.
TT

PS: I'm not accusing Ryan or the rest of the RT staff of committing a criminal act... only the developer.

Edited by *TT* (05/12/06 07:13 PM)


Post Extras: Print Post   Remind Me!   Notify Moderator  
Gator519
journeyman


Reged: 08/17/04
Posts: 80
Loc: MN
Re: NOTICE: Possible Virus in Poker Software (RBCALC) [Re: *TT*]
      #5797961 - 05/12/06 07:15 PM

\WINDOWS\system32\utlsrv.exe

This is the only file I found on my computer. I then went into the registry and saw both of the keys that you guys said, and deleted those as well. Is it normal for the other files not to show up but this one does?


Post Extras: Print Post   Remind Me!   Notify Moderator  
Pages: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | >> (show all)



Extra information
0 registered and 1 anonymous users are browsing this forum.

Moderator:  Mat Sklansky, Pokeraddict, Ryan Beal, Mike Haven 

Print Topic

Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      UBBCode is enabled

Rating:
Topic views: 12977

Rate this topic

Jump to

contact us 2+2 Publishing

Powered by UBB.threads™ 6.5.5



Message Boards and Forums Directory

Pages provided by ConJelCo