Thank you for your email to Avira's virus lab. Tracking number: INC00959975.
We received the following archive files:
File ID Filename Size (Byte) Result 26524856 4f1fef678d286.zip 227.29 KB OK
A listing of files contained inside archives alongside their results can be found below:
File ID Filename Size (Byte) Result 26524857 4d6e4ce7.vir 628 KB MALWARE
Please find a detailed report concerning each individual sample below:
Filename Result 4d6e4ce7.vir File ID Filename Size (Byte) Result 26524856 4f1fef678d286.zip 227.29 KB OK
A listing of files contained inside archives alongside their results can be found below:
File ID Filename Size (Byte) Result 26524857 4d6e4ce7.vir 628 KB MALWARE
Please find a detailed report concerning each individual sample below:
Filename Result 4d6e4ce7.vir MALWARE
The file '4d6e4ce7.vir' has been determined to be 'MALWARE'.Our analysts named the threat BDS/Pcclient.fbkr.The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.11.21.151.
This is not a false positive and came with Mansion Casino.
Joined: May '09
Location: India
Age: 37 (M)
Posts: 4873
i think it shows up as virus/malware because poker clients can monitor your running programs, send screenshots, data (like ip address, mac address)etc to their server. its written in their T&C
Joined: Nov '09
Location: Canada
Age: 55 (M)
Posts: 2387
I think Pokerstars monitors what other softwares you may be running along with their poker client, so maybe that too would show up as being some kinds of malware/virus. They do this to try and prevent you from running softwares that are banned in their terms and conditions. Am I right? The problem you saw might not be so bad, but wherever there is easy money to be made you need to beware. Sites that have made me question how legitimate they are I simply don't play at.
I would be interested to hear what Jessthehuman has to say, as he and several other forum members are much more aware of these computer issues than I am.
I have 7 sites downloaded and this is the only one that has shown any type of malware. I'm not concerned because its on the casino side. I don't use any casinos. The malware is in jail and not getin out any time soon.
Joined: Mar '11
Location: Canada
Age: 44 (M)
Posts: 1490
False positive for sure. Most, if not all poker clients do Indeed run background checks, screening for any illicit programs running. For example, some data mining programs and HUDS are banned on sites, and therefore the software will scan for them and report back to the site.
Typicall it's not HUD themselves that are banned, but in particular HUDS that give you advice ie: call/check/fold etc. I wouldn't worry too much about this, it's standard practice. I mean any information they want on you, they already get when you signup anyways.
Joined: Apr '09
Location: Australia
Age: 40 (M)
Posts: 6483
Posted by SuperNoob: i think it shows up as virus/malware because poker clients can monitor your running programs, send screenshots, data (like ip address, mac address)etc to their server. its written in their T&C
but i'm not a tech guy so i might be wrong
You're spot on. For security purposes poker sites basically HAVE to have spyware built into them.. It's the only way they can protect against collusion, bots, illegal data-mining apps, etc.
Joined: Mar '09
Location: Australia
Age: 52 (M)
Posts: 325
When you download a poker client do you read the terms and conditions or even the EULA???? Maybe instead of just clicking okay read it you just may want to read exactly what it says. Just a suggestion for next time. "_
Joined: Apr '09
Location: Australia
Age: 40 (M)
Posts: 6483
Interestingly though, an online casino group (quite a few years back), Gambling Federation software - was found to have malware that added lines to the host file in window, essentially blocking access to competitors websites !
(EDIT: in relation to above post, this ^ was not in the T&C / EULA either, it was completely illegal)
I think ultimately, the golden rule with gambling online (more so than poker specifically) is to stick to reputable sites..
Although, for what it's worth - if you downloaded a poker or casino site from somewhere OTHER than the official website - I would be extremely wary of any warning regarding back-door servers.. As repackaging gambling software with a back door would be a pretty feasible way of cheating somebody.
Joined: Feb '08
Location: United Kingdom
Age: 35 (M)
Posts: 1886
Posted by arthur72: When you download a poker client do you read the terms and conditions or even the EULA???? Maybe instead of just clicking okay read it you just may want to read exactly what it says. Just a suggestion for next time. "_
No one ever reads the terms and conditions lol.
Check out this Eddie Izzard clip. Terms and conditions bit starts 50 secs in.
Joined: Aug '08
Location: Canada
Age: 43 (M)
Posts: 658
Posted by awood88:
Posted by arthur72: When you download a poker client do you read the terms and conditions or even the EULA???? Maybe instead of just clicking okay read it you just may want to read exactly what it says. Just a suggestion for next time. "_
No one ever reads the terms and conditions lol.
Check out this Eddie Izzard clip. Terms and conditions bit starts 50 secs in.
Joined: Apr '09
Location: Australia
Age: 40 (M)
Posts: 6483
Someone recently was telling me they or someone they knew.. or someone anyway (this is a kind of friend of a friend thing and may even be BS) - anyway - apparently somebody who worked for a legal department and wrote T&C's for application software wrote in a clause of 'if you would like free money please call xxx' and it was three years later they FINALLY got a call from somebody claiming the free money. ($1,000 apparently was despatched).
