AACDC.exe infected with Generic12.BPFL Trojan

OK, My anti virus keeps alarming me. First it was the packed Yoda now it is this trojan.

I know you guys are going to tell me not to worry but the damn thing keeps popping up all the time. I am not even using CDC or AA and it still pops up. I can be quietly browsing or working in Photoshop and boom up it pops again.

Why?

-E-

Surely AACDC should not be opening itself and accessing explorer.exe on it's own accord. I have submitted the file to the labs for full testing.



-E-

Sounds like you've had something like a backdoor trojan and it's disguising itself as CDC.

Could be but unfortunately I am not the only one. Several other SONAF members have the same/similar issue.

[SONAF]Ec$t@$io

I cleaned it off my system completely and went to download it again.
Both CDC and the patch for Vista x64 are being blocked even before they are installed :


(scroll right -->)

False positive or not I don't see why it should randomly open itself or access explorer.exe once installed. That behaviour is simply unacceptable and damned annoying when that pop-up is constantly interrupting my other activities.



-E-
Post edited by [SONAF]Ecstasio at 2/15/2009 7:54:03 AM

dude ur not the only one who is having this problem.

CDC has always provided false positives due to the way it works. I cannot tell you how it works, though, because that is how people learn to evade it.

I know it pulls your profile page on the TWL site off to read your Anti-Smurfs, though -- thats probably why it opens explorer.

---

TWL|eXplicit
TeamWarfare Quality Control Staff | Web Developer
Email: eXplicit@teamwarfare.com
IRC: #teamwarfare, #twl_support

Which I would not mind but it is doing it ALL THE TIME, even when I am not playing anything at all.

-E-

Originally posted by: [SONAF]Ecstasio
Which I would not mind but it is doing it ALL THE TIME, even when I am not playing anything at all.

-E-

CDC is not running "all the time". You anti virus software might be detecting that you have the program installed but unless you start CDC it is not going to be running.

The only thing I can think of is a few times I have incorrectly shut the program down and it still show the AACDC.exe process running. When you are finished playing on CDC make sure you click "Disconnect from CD Server" and then X out. If you have a concern about it still running check your processes through your task manager and shut it down by ending the process after you are done playing a match.
Post edited by Russd3 at 2/16/2009 8:01:01 AM

why is AVG in recent months calling this a virus? why wasnt this milicious code causing the alert removed ASAP?

Originally posted by: -eXplicit
CDC has always provided false positives due to the way it works.

this is not true, AVG didnt start alerting until the last CDC update.

Originally posted by: -eXplicit
I cannot tell you how it works, though, because that is how people learn to evade it.

I know it pulls your profile page on the TWL site off to read your Anti-Smurfs, though -- thats probably why it opens explorer.

this is a very disturbing statement.....
Post edited by (TRAGIC)unit2 at 3/12/2009 8:55:18 PM

The last update to the main version of CDC (32 bit) was over two years ago. Aside from a few file changes for 64 bit users nothing has changed for the average user. The problem is with your anti-virus software unfortunately.

On a side note we are about to start beta testing a new AC Client that will be replacing CDC. CDC's replacement is coming very soon so if you are not satisfied then you will just have to wait a little longer.

I am locking this thread because there are not many other ways we can say this is a false positive, which it is.
Post edited by Russd3 at 3/13/2009 3:14:42 AM

I'm surprised Anti-Virus programs have not flagged CDC before now. Technically CDC is a virus/trojan. It takes a hack to catch a hack sometimes. The difference between CDC and your regular virus/trojan though, is that CDC is not malicious and will not hurt your system in any way what so ever.