win32.hacktool.aid

dellWlan

This is possibly paranoia but i got a travian games pop up, a quick google said there could be a virus so i checked boards and followed the steps in the "i think i've got a virus" after downloading MBAM I got a message from Spybot Resident (Teatimer) saying

09/12/2010 23:14:59 Encountered and terminated Win32.HackTool.Aid in C:\WINDOWS\system32\regsvr32.exe!

if i scan that specific file with spybot S&D it's heuristic scan says status AdDestination

Norton
AdAware
Malwarebytes AntiMalware
SuperAntiSpyware
TFC
Housecall
And a full system check with Spybot S&D all found nothing

I'm hoping its the paranoid thing and maybe a false positive by spybot teatimer
Is it?

bhickey

Isn't Travian someting that you would have registered with to play online games?

In general, if you ever want to get an opinion on a specific file, you can e-mail the file to VirusTotal and they'll send you back the results from all sorts of scanners.

dellWlan

yeh i believe travian is some sort of semi legit online gaming thing. i definitely hadn't signed up with them but apparently they're not averse to having the product advertised via pop ups from malware/spyware/adware what ever is the most appropriate description is.

i didn't get the link/name of who you email the file to to get it checked.. can you re post it.

Thanks

bhickey

dellWlan wrote: »

i didn't get the link/name of who you email the file to to get it checked.. can you re post it.

Oops, I've fixed it now.

dellWlan

Thanks for that I've emailed them the file so hopefully I'll hear back soon


clean bill of health. paranoia 1 me 0