New Update: Trojan Virus - Winning Poker Network -- Two Plus Two Poker Forums

Two Plus Two Forums Archived Forums Internet Poker Winning Poker Network

New Update: Trojan Virus

...

06-28-2017 , 12:41 PM

xBIGx

banned

Join Date: Jun 2017 Posts: 390

My virus protection didn't find anything with ACR until the latest update today.

Its also only happening with ACR client and not Betcoin.

Last edited by xBIGx; 06-28-2017 at 12:49 PM.

06-28-2017 , 12:50 PM

DaddyDuck

centurion

Join Date: Apr 2016 Posts: 171

maybe it's a program sniffing for bots?

06-28-2017 , 12:55 PM

xBIGx

banned

Join Date: Jun 2017 Posts: 390

Quote:

Originally Posted by DaddyDuck

maybe it's a program sniffing for bots?

PokerStars and others have that but it doesn't show as a virus.

06-28-2017 , 12:59 PM

Winning_TD

veteran

Join Date: Mar 2012 Posts: 2,535

I have asked devs.. When i get a response i will let you know

06-28-2017 , 01:04 PM

xBIGx

banned

Join Date: Jun 2017 Posts: 390

Quote:

Originally Posted by Winning_TD

I have asked devs.. When i get a response i will let you know

Common name:
Exploit.gen
Technical name:
Generic Exploit
Threat level:
Low
Type:
Vulnerability
Effects:
This is a vulnerability that can be exploited to execute arbitrary code, carry out denial of service attacks, etc. It does not spread automatically using its own means.
Affected platforms:
Windows 2003/XP/2000/NT/ME/98/95

First detected on:
July 12, 2005
Detection updated on:
Sept. 23, 2007
Statistics
No

06-28-2017 , 08:49 PM

SeeMyIceShine

newbie

Join Date: May 2012 Posts: 48

I'm having issues with the True client after the update. I opened the True software earlier today to run the update, then now tried to open the client and got a SONAR.Heuristic.158 alert and Norton just straight up removed the True client. I've never had any issues before today???

06-28-2017 , 10:00 PM

Bongfellow

banned

Join Date: Jan 2014 Posts: 374

Can you guys just sticky this topic, it literally gets posted every single update.

06-29-2017 , 02:22 AM

SeeMyIceShine

newbie

Join Date: May 2012 Posts: 48

Quote:

Originally Posted by Bongfellow

Can you guys just sticky this topic, it literally gets posted every single update.

If this happens every update (this has never happened to me before with WPN software on any updates) why does the software get flagged as a threat by Norton?

06-29-2017 , 05:55 AM

silkhandlez

grinder

Join Date: May 2009 Posts: 480

Quote:

Originally Posted by Bongfellow

Can you guys just sticky this topic, it literally gets posted every single update.

right? who even wears condoms? it is 2017 for christ sakes.. If you arent pumping and dumping, you are clearly not a very smart person.

06-29-2017 , 12:25 PM

#10

MLSFTW

enthusiast

Join Date: Oct 2014 Posts: 69

I am also getting the SONAR thing from Norton and it says it removed the threat (program). Any update?

06-29-2017 , 01:07 PM

#11

xBIGx

banned

Join Date: Jun 2017 Posts: 390

Quote:

Originally Posted by MLSFTW

I am also getting the SONAR thing from Norton and it says it removed the threat (program). Any update?

I had to install an older version of ACR and have it reupdate.

I also had resEn.dll from betcoin folder and used that instead since it didn't set off my antivirus.

06-29-2017 , 03:30 PM

#12

Bongfellow

banned

Join Date: Jan 2014 Posts: 374

Quote:

Originally Posted by SeeMyIceShine

If this happens every update (this has never happened to me before with WPN software on any updates) why does the software get flagged as a threat by Norton?

Because software that is obscure (which a poker site updating it's software is)can set off false flags in Norton pretty frequently. I have no idea what specifically sets it off, but it has been happening for years, and happens almost every update until you click it as safe in Norton again.

I only mention a sticky because there has been no less than 5 different threads about this topic in the last 6 months, I've even made one myself at one point.

06-29-2017 , 03:39 PM

#13

xBIGx

banned

Join Date: Jun 2017 Posts: 390

Quote:

Originally Posted by Bongfellow

we'll if i was a hacker and i knew the server was updatinng i would breach the server and put in my own code and use it as a cover.. the thing is the detection was only with ACR and not the other WPN clients.

06-30-2017 , 01:16 AM

#14

SeeMyIceShine

newbie

Join Date: May 2012 Posts: 48

Thanks for providing some insight Bongfellow. I've never had any problems with Norton and it's compatibility with WPN software before, but what you said about poker software being more on the obscure side and that being the reason for it setting off flags makes sense. Thanks for the reply back.
Hope anyone else having issues gets them resolved.

...