Help please Win32:inject-BS [TRJ]

Viruses and worms
1

Avast started finding: Sign of “Win32:Inject-BS [Trj]” has been found in “C:\Program Files\PokerAce Hud\PAHud.exe” file.
can anyone help?

2

:slight_smile: Hi :

 When dealing with "Trojans", it is best to use a program that SPECIALIZES
 in that malware "area" and many Malware-fighting Experts recommend
1) AVG Antispyware, best downloaded from www.ewido.net
2) The FREE ver of SUPERAntiSpyware from www.superantispyware.com .
3

Sorry should have said:

AVGAS No Detection
TrojanHunter No Detection

4

Hi sputnik365,

Use this removal tool: http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle@mm.removal.tool.html

polonus

5

Possible false alarm. See here:

http://pokeracesoftware.com/forums/viewtopic.php?t=5413

6

polonus thanks scan is clean

FreewheelinFrank this is more current
http://pokeracesoftware.com/forums/viewtopic.php?t=5586&postdays=0&postorder=asc&start=0

I am satisfied that this is a false positive.
I have added the file to locations that won’t be scanned in standard shield and exclusions in settings but it is still detected??
Thanks

7

Did you boot after that?
Did you correctly added the path (maybe you should use both long and short paths).

8

I am the developer of the program in question. I am confident that this is a false positive. It’s not the first time it’s happened. I believe it’s due to my anti-piracy software (SoftwarePassport).

I would appreciate you taking a look at the files to see if it is a false positive. You can download the last few beta versions that are identified as having the virus here:

http://pokeracesoftware.com/hud/downloadfile.php?fileid=PAHudBeta-v1.17.6
http://pokeracesoftware.com/hud/downloadfile.php?fileid=PAHudBeta-v1.17.5
http://pokeracesoftware.com/hud/downloadfile.php?fileid=PAHudBeta-v1.17.4

Thanks,
Josh

9

Dr. Web shows it as clean… seems an avast false positive.
Hope they correct the virus database soon.

10

Ok
it is fixed with latest update thanks.

tech, I didn’t know you had to reboot after making those changes
thanks again for advice

11

You don’t have to, it was a suggestion that will ‘stop’ and ‘start’ the antivirus protection again.
But, as you’ve said, glad they have corrected the problem in the last VPS update 8)