cheval de troie sur scrabble pro???????

[jeje07]

bonsoir,

Ce soir par 2 fois j'ai eu un problème. Quand je me connecte au jeu et en cours de partie si je regarde le classement, j'ai une fenetre pop up qui s'ouvre dans internet explorer et je tombe sur une page qui contient un chaval de troie apparemment (enfin d'après mon antivirus!)

Des infos a ce sujet??????

[Gerillo]

Analyse du fichier d'installation :

AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.24 -
Authentium 4.93.8 2007.12.23 -
Avast 4.7.1098.0 2007.12.24 -
AVG 7.5.0.516 2007.12.24 -
BitDefender 7.2 2007.12.24 -
CAT-QuickHeal 9.00 2007.12.22 -
ClamAV 0.91.2 2007.12.24 -
DrWeb 4.44.0.09170 2007.12.24 -
eSafe 7.0.15.0 2007.12.23 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.24 -
FileAdvisor 1 2007.12.24 -
Fortinet 3.14.0.0 2007.12.24 -
F-Prot 4.4.2.54 2007.12.23 -
F-Secure 6.70.13030.0 2007.12.24 -
Ikarus T3.1.1.15 2007.12.24 -
Kaspersky 7.0.0.125 2007.12.24 -
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.24 -
NOD32v2 2745 2007.12.24 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.24 -
-> Prevx1 V2 2007.12.24 Heuristic: Suspicious Self Modifying File
Rising 20.24.02.00 2007.12.24 -
Sophos 4.24.0 2007.12.24 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.24 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.24 -
Webwasher-Gateway 6.6.2 2007.12.24 -
File size: 2322628 bytes
MD5: 4d9ced72f94b35a7cf35ac59ececdb61

Commentaire de Prevx1 V2 :

SCRABBLEPROB.EXE
This executable program has a file size of 2,322,628 bytes, it is most frequently called SCRABBLEPROB.EXE and is most frequently located in the %mai%\ folder.
The file header contains the following information:
Vendor : donfack
Product: scrabbleproB Setup

This file has not shown any unsafe tendencies and is likely to be safe to use. It was first seen on Monday, Sep 24 2007. It has been seen frequently by 2 users in this section of the community. The file was first seen in SPAIN but has been seen in other locations, including FRANCE.
SCRABBLEPROB.EXE has been seen to perform the following behaviors:
- The Process is polymorphic and can change its structure
- Executes Processes stored in Temporary Folders
- Executes a Process
SCRABBLEPROB.EXE has been the subject of the following behaviors:
- Created as a process on disk
- Executed by Internet Explorer
- Executed as a Process
- Deleted as a process from disk