Omaha Equity Calculator ███ POSSIBLE MALWARE!!! DO NOT DOWNLOAD THIS & CHECK PC IF YOU HAVE ███

Two Plus Two Forums Online Poker Sites & Marketplaces Poker Software General Software Discussion

Post Reply Subscribe

...

11-27-2011 , 03:40 AM

harrydebeng

journeyman

Join Date: Oct 2006 Posts: 279

[I]DO NOT DOWNLOAD THIS: POSSIBLE MALWARE!!!

See the post below.

Last edited by jukofyork; 11-28-2011 at 10:37 AM. Reason: Leaving the thread open for the time being to allow for discussion of possible malware, etc

Quote

11-28-2011 , 05:30 AM

Korn

centurion

Join Date: Oct 2007 Posts: 126

Warning

DO NOT INSTALL OR USE THIS SOFTWARE.

This is a pirated beta version of the Omaha Equilab that is being developed by PokerStrategy.com.

The guy who stole it - most like during a beta test - removed our logo from the software. Also, it is very possible that malware was inserted by him.

We are currently seeking to indentify the perpetrator and will take immediate legal action against him.

Note: the proper version of the Omaha Equilab will be released on PokerStrategy.com during the coming weeks. Do not download the software from any other source. Also, the software will be available for free once it is released.

Best regards,
Dominik Kofert
CEO, PokerStrategy.com

Quote

11-28-2011 , 07:25 AM

PokerStrategy

grinder

Join Date: May 2008 Posts: 489

Here is the correct version of the tool:

Thread here at 2+2:
http://forumserver.twoplustwo.com/17...lysis-1131832/

Download:
http://www.pokerstrategy.com/software/14/

Quote

11-28-2011 , 07:39 AM

_______

journeyman

Join Date: Jun 2011 Posts: 276

Any more info about the possible malware, please?

Quote

11-28-2011 , 08:04 AM

PokerStrategy

grinder

Join Date: May 2008 Posts: 489

There is not more info.

All we know is that this guy stole the public beta and manipulated the code (e.g. taking out our logo).

Thus, we can only assume he manipulated the code in other ways, as well.

We are preparing legal action to make sure this gets offline.

Quote

11-28-2011 , 08:17 AM

Makemegood

adept

Join Date: Apr 2006 Posts: 1,141

Can you have one of your techs find out if we installed something unsafe please

Quote

11-28-2011 , 10:06 AM

wull

journeyman

Join Date: Jul 2007 Posts: 216

As a standard generic first step you can upload the downloaded installation file to virustotal.com and have their ~40 virus scanners check it.

But for a scenario like this there's a much higher chance than usual of a newly designed or specifically manually targeted malware which is one of the rare scenarios where an actual malware might go unnoticed by all of them.

For the following two scenarios:
a) 25/40 say it's virus named x
b) 0/40 say virus

For a) I would be pretty sure I downloaded virus x for b) I wouldn't be too sure I'm safe.

A next step could be sending this file to a "virus scanner"-software development company.

Quote

11-28-2011 , 10:36 AM

jukofyork

Carpal \'Tunnel

Join Date: Sep 2004 Posts: 11,749

I deleted the OP, but left the thread open for people to discuss the malware aspect (with a big warning on the thread title to hopefully attract back anybody who has downloaded/installed it...).

I also informed the other two strategy forums where he has cross-posted (I don't have mod rights there so need to wait for them to take it down).

Juk

Quote

11-28-2011 , 11:06 AM

Cpt.Hero

adept

Join Date: Dec 2007 Posts: 1,020

i checked it with virustotal and it found no virus. Lets hope that it is not a completely new virus.

Quote

11-28-2011 , 12:14 PM

#10

burzum1

adept

Join Date: Jul 2011 Posts: 912

scanned my PC with Dr.Web CureIt!, Microsoft Security Essentials and Avast.
found no viruses.

Quote

11-28-2011 , 12:28 PM

#11

Gary Oak

enthusiast

Join Date: Sep 2011 Posts: 66

I downloaded it but did not install, should I be concerned?

Quote

11-28-2011 , 02:21 PM

#12

PokerStrategy

grinder

Join Date: May 2008 Posts: 489

Yep, just instal the orginal one, where you can trust our reputation:
http://forumserver.twoplustwo.com/45...lysis-1131833/

Quote

11-28-2011 , 02:45 PM

#13

_______

journeyman

Join Date: Jun 2011 Posts: 276

No, you don't need to be concerned if you didn't execute the installation file.

Quote

12-05-2011 , 02:43 PM

#14

shaymalus

enthusiast

Join Date: May 2007 Posts: 86

Any update on this?

I had that pirated version of the software on my PC for about 10 days now, and I only just saw this thread saying it might be malware.

Very worried now

Quote

12-05-2011 , 02:59 PM

#15

dwayman

grinder

Join Date: Mar 2008 Posts: 399

I uploaded the file to Virustotal and got "no virus's detected"

If I restore my PC to before the software was installed will I be 100% safe from anything ?

Or do I have to do a clean install ?

BTW. The x-post on highstakes PLO was only closed. There was no reference that I could see until today.

Quote

12-06-2011 , 08:54 AM

#16

dwayman

grinder

Join Date: Mar 2008 Posts: 399

IS the OP going to respond ? Is it a hacked account ?

Quote

12-06-2011 , 02:10 PM

#17

jukofyork

Carpal \'Tunnel

Join Date: Sep 2004 Posts: 11,749

Quote:

Originally Posted by dwayman

If I restore my PC to before the software was installed will I be 100% safe from anything ?

Well you have to wonder why they did it? Maybe they were just hoping to make money selling it and hope nobody noticed.

Juk

Quote

12-06-2011 , 02:37 PM

#18

dwayman

grinder

Join Date: Mar 2008 Posts: 399

Quote:

Originally Posted by jukofyork

Well you have to wonder why they did it? Maybe they were just hoping to make money selling it and hope nobody noticed.

Juk

Yeah I am very suspicious obv.

Does system restore in windows 7 protect you from this ? I know that it didn't in XP with rootkits etc.

Quote

12-07-2011 , 11:03 PM

#19

anononon

Guest

Posts: n/a

How interesting.

Quote

01-03-2012 , 03:53 PM

#20

Makemegood

adept

Join Date: Apr 2006 Posts: 1,141

Might be totally unrelated to this issue but better safe then sry.

A guy from russia logged in/or tried to log into my gmail account (got gmail warning). I had done alot of pc searching for trojans etc after deleting the program and didnt find anything. After the russia login attempt today i dl some other malware searchers and it found one: "Soundmen.exe" and it also had a process running with same name.

Google info:

Quote:

The file soundmen.exe is identified as the Trojan Program that is used for stealing bank information and users passwords.
To delete soundmen.exe we recommend you to use UnHackMe:

Fwiw I used malwarebytes to find it.

Quote

Post Reply Subscribe

...