Trojan in Poker Office?

[manub]

Hey all,

Since yesterday, Poker Office users equipped with Avast! antivirus software have been warned that one file from PO is infected with a trojan virus. It may be a mistake from Avast! since no other antiviral programs seem to find anything, but it's really scary anyway...

Here's the thread on the PO forums about it. Several people reported it hours ago, and still no reaction for PO support. I sure hope they have a good explanation for this. In the meantime, I'm not using PO any longer.

http://www.pokq.com/forum/viewtopic....sc&start=0

[Distillery]

I'm pretty sure this was discussed a while back. If I remember correctly it was something that had to do with the verification of the registration key. Which means it's nothing to worry about.

[manub]

Oh, sounds like good news...

Can you point me to a topic? I can't find it.

[tomtemor]

Do this to get rid of the warning;

Reboot your computer, download and install; http://www.pokeroffice.com/update/update218.exe

Start Poker Office.

[LeeLoo]

[ QUOTE ]
Do this to get rid of the warning;

Reboot your computer, download and install; http://www.pokeroffice.com/update/update218.exe

Start Poker Office.

[/ QUOTE ]

I don't use PO but surely this must be a joke.

A program picks up a trojan in PO. On their own forum their is no explanation why this happens. Instead they issue a patch which stops the trojan from showing. On their forum a poster that registered today states the patch works and the trojan does not show up now and PO will now start ok. So now the patch is posted here, still no explanation.

Sounds safe to me how bout yawll.

[sputnik365]

ALMOST certainly a false positive

Report from Jotti,
This file is found by Avast on my computer
Please note that no AV found anything.


Online malware scan Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1

File to upload & scan:
Service
Service load: 0% 100%

File: ppthandler3.dll
Status: MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time
and/or runtime packers were found, this is suspicious. Normally programs
aren't packed and don't force the sandbox into lengthy emulation. Do
realize no scanner issued any warning, the file can very well be harmless.
Caution is advised, however.) (Note: this file has been scanned before.
Therefore, this file's scan results will not be stored in the database)
MD5 0b63566ca4a7885f4f5af2b60011581d
Packers detected: UPX
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
VirusBuster Found nothing
VBA32 Found nothing


Copyright © 2004-2005 Jordi Bosveld <jotti@jotti.org>