Malware located when trying to play bejeweled 2 through yahoo games

Viruses and worms
1

the problem I’m having is that when i try to play bejeweled 2 through the yahoo games website it shows up that there is a Trojan found. I’ve done some research and apparently the problem is the popcaploader.dll file. It is something that popcap games uses to track the users. Is there a work around for this as I have customers screaming about this problem. It has happened on quite a few computers including my own. They all run Windows XP home with the home version of Avast 4.8. They are all up to date on the program and the virus definitions. Any help would be greatly appreciated.

2

go online to to “Virus total”
and
upload popcraploader.dll
post a link to the results
then zip and send a copy to virus@avast.com

If you do not value your privacy you may exclude

http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW_POP.A

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=134071

3

I cannot upload the file as i do not have it to do so. When avast pops up all you can do is abort the connection. I have pasted a copy of the file name located in the avast pop up. (http://l.yimg.com/jh/games/web_games/popcap/bejeweled2/popcaploader_v6.cab\PopCapLoader.dll) I hope this helps. The only workaround I have found is to disable the on-access protection. The problem is some of my customers will not remember to restart the on access protection when they are done playing the game.

4

what about this did you not understand?
“If you do not value your privacy you may exclude”
there should be instructions on how to exclude around in helpor perhaps an avast expert can get back to you
there should be a way to limit what data is sent back to the server

5

Well SuperAntiSpyware doesn’t like it either.

Neither do 21/35 (60%) of the scanners on virustotal, http://www.virustotal.com/analisis/863d5fff35b7f72d728131d5ec92b3d7, so the avast detection is good I would say.

6

would anything in this thead help you?
http://forum.avast.com/index.php?topic=38159.0

7

I wouldn’t have thought so as it is a totally different file name and this detection is also a different malware name, e.g win32:Adware-gen {Adw} and not Win32:Trojan-gen {Other}