Trojan Problem

[TheMailMan78]

Ok MSE just found a Trojan on my rig. However the Trojan was in a trainer for a video game I have had for a few years now. I mean this trainer is from 2009 I believe. Why is MSE just NOW picking it up? Could it be a false reading with the new definitions? Should I be worried about anything?

I ask because Malwarebytes never picked it up ether.

Here is the name of the Trojan.
Win32/Dynamer!dtc

Heres a link to the info...
http://www.microsoft.com/security/p...=Trojan:Win32/Dynamer!dtc&threatid=2147638124

 

[CrackerJack]

If it's been on your computer this long and hasn't cause a problem.. i wouldn't worry. Yeah prob just a false reading. I have a folder that gets false reading all the time no issues tho

 

[streetfighter 2]

Trainers are often picked up as viruses because they use dll injection and other such things which would throw flags in your typical anti-virus. If the anti-virus you're using has been recently updated it may have modified it's heuristics, and as such, made a false-positive.

If you're still concerned, try uploading the file to virustotal.com.

 

[TheMailMan78]

If it's been on your computer this long and hasn't cause a problem.. i wouldn't worry. Yeah prob just a false reading. I have a folder that gets false reading all the time no issues tho

lol how would I know if it caused a problem ya know?

Trainers are often picked up as viruses because they use dll injection and other such things which would match the heuristics scanners in your typical anti-virus. If the anti-virus you're using has been recently updated it may have modified it's heuristics, and as such, made a false-positive.

See thats what I was thinking. But it seem to pick up a particular one which had me a little nervous.

 

[sniviler]

I wouldn't worry about it after 3yrs, to be safe when I use trainers or no cd/dvd exe's I disable my network connection.

I use MSE too, give AVG Free a try for another quick scan.

 

[CrackerJack]

lol how would I know if it caused a problem ya know?

point taken, well the first i would check is if it's using a abnormal amount of cpu/ram usage. if not... well you computer is still running i assume so.. it's ok



edit: plus the WinBench and Ping program i made gave false reading also... And they were perfectly clean

 

[twilyth]

I'd split the tie with something like Avast, spybot, avira (free or trial version), etc. If 2 of the 3 pick it up, then I would take it seriously.

Also, just because the trainer is from 2009 doesn't mean it couldn't have been infected more recently.

 

[Black Panther]

Trojan:Win32/Dynamer!dtc is a name used for trojan detections that have been added to Microsoft antimalware signatures after advanced automated scan analysis.

Source

 

[crazyeyesreaper]

its a false positive mailman seriously just grab Malwarebytes and do a scan done, if that dosent pick it up its gaurenteed a false positive, ive had trainers do it before roughly 20+ of them in all since 2006 none were real viruses aka 1 would get picked up via an anti virus but is deemed clean by 4-5 others, so dont sweat it

 

[TheMailMan78]

Source

Yeah I know. I posted that link. But what does it mean.

I'd split the tie with something like Avast, spybot, avira (free or trial version), etc. If 2 of the 3 pick it up, then I would take it seriously.

Also, just because the trainer is from 2009 doesn't mean it couldn't have been infected more recently.

How? I havent even ran it in months. Maybe in a year.

 

[CrackerJack]

Yeah I know. I posted that link. But what does it mean.



How? I havent even ran it in months. Maybe in a year.

I believe he means, if you actually ran it since then..

 

[TheMailMan78]

I believe he means, if you actually ran it since then..

Oh no. I haven't ran it in forever. Not only that Ive rebuilt my OS a few times since running it last.

I think its what streetfighter 2 said about the heuristics. Anyway MSE just deleted it.

 

[Kreij]

As, SF2 said, upload the file to VirusTotal. It will run it thought something like 20 different virus scan engines.

 

[95Viper]

As, SF2 said, upload the file to VirusTotal. It will run it thought something like 20 different virus scan engines.

^This!^

VirusTotal

 

[Wrigleyvillain]

Trojan problem? Maybe next time don't buy the extra large Magnums. I mean I can't blame you and all but if they just aren't working out in the field you gotta swallow that pride, bro!

 

[alexsubri]

Well according to

it is a false trojan. As stated above Trainers are injecting themselves into the game, cause a false alarm on your anti virus. Most likely it was the virus update. Don't sweat it.

 

[twilyth]

How? I havent even ran it in months. Maybe in a year.

You don't have to run a program for it to get infected. A virus can look for exe's in the NTFS tables and infect them. I don't know how common that is though. Apparently not very.

alexsubri: Virus total looks like a really cool app.

 

[TheMailMan78]

Well shit MSE deleted the file. What do?

 

[DannibusX]

My problem with Trojan is I've never seen the serial number.

 

[95Viper]

Lotta trolling around here, lately...

Back on topic.

Well shit MSE deleted the file. What do?

Did it actually delete it or is it in quarantine?

Look here: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Quarantine\

or,

How do I remove or restore items quarantined by Microsoft Security Essentials?

Help and How-to

 

[Completely Bonkers]

Damn, MSE just cut my backdoor to TMM's webcam.

If you need a backup copy of that file... I have it as well as your large collection of f4p material and IRS submissions

 

[TheMailMan78]

Lotta trolling around here, lately...

Back on topic.



Did it actually delete it or is it in quarantine?

Look here: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Quarantine\

or,

How do I remove or restore items quarantined by Microsoft Security Essentials?

Help and How-to

No I checked. They are gone.

 

[Kreij]

Problem solved then, no?

 

[95Viper]

No I checked. They are gone.

Well, let's see how good MSE is... Get Recuva or some other file recovery software and see if it can pull it out.

Problem solved then, no?

That is true funny. Dam* good come back!

 

[TheMailMan78]

Well heres a link to the trainer. I am pretty sure this is the same one. It wont let me DL it anymore. Maybe someone could try for me and upload it to virustotal.com?

http://www.cheathappens.com/download_file.asp?id=23346