Jump to content


Photo

Trojan-Proxy.Ranky from 2moons?


  • Please log in to reply
5 replies to this topic

#1 Elpy

Elpy

    Member

  • Full Member
  • Pip
  • 3 posts

Posted 20 February 2009 - 06:10 PM

A few days ago I downloaded the MMORPG 2moons onto my laptop. During the installation, my spyware program reported two suspicious files being downloaded. Upon searching I found that both were included in the game and were not harmful. My PC hasn't had any problems since then. However, when I ran a check this afternoon it found a high-level threat: Trojan-Proxy.Ranky
It was found in C:\Program Files\Acclaim\2MOONS\bin\succubus.dll so I know that it must have to do with the game, I just want to make sure that it won't harm my computer in any way.
Does anyone know if it's harmful/what function it serves?
Thanks.

#2 Budfred

Budfred

    Malware Hound

  • Administrators
  • PipPipPipPipPip
  • 21,574 posts

Posted 20 February 2009 - 09:38 PM

If this is from the source site and that is a legit company, the file may be a false positive... If it is from some other site, if it is not a legit company or if it is cracked software, it may be infected and messing with your computer...

I suggest you do this with the suspect files...

Go to Jotti's malware scan at http://virusscan.jotti.org/ and upload the file for scanning and post the results here.
Budfred

Helpful link: SpywareBlaster...

MS MVP 2006 and ASAP Member since 2004

Please read the Instructions for posting requested logs and the article "So how did I get infected in the first place?"

#3 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 20 February 2009 - 10:53 PM

I agree with Budfred's suggestion of uploading to Jotti; if the site is busy, upload to VirusTotal instead.

As a former 2Moons player, I know (at least then) it did not contain spyware..

Please consider donating to help support the continued prompt and excellent services of this site.


#4 Elpy

Elpy

    Member

  • Full Member
  • Pip
  • 3 posts

Posted 21 February 2009 - 02:09 AM

Thanks, both.
Here are the results.

File: succubus.dll
Status: INFECTED/MALWARE
MD5: ff3c0e335454395e2152b543fdca94d4
Packers detected: -

A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
CPsecure Found BackDoor.W32.VB.bax
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
G DATA Found nothing
Ikarus Found Trojan-Proxy.Win32.Ranky.nd
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Sophos Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

#5 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 21 February 2009 - 02:46 PM

False positive; don't worry about it.

Please consider donating to help support the continued prompt and excellent services of this site.


#6 Elpy

Elpy

    Member

  • Full Member
  • Pip
  • 3 posts

Posted 21 February 2009 - 02:50 PM

Good to hear, thanks again.




Member of UNITE
Support SpywareInfo Forum - click the button