Trojan Virtumonde

[BROGS]

Hi Pete,

Yesterday I D/loaded the latest Version of FSUIPC for FS9 and FSX I keep getting the following Error Message when I attempt to start FS9

Threat Name= Trojan.Virtumonde

Details= Spyware Doctor has blocked an Application attempting to access a File

Threat Level= Elevated

Infection=C:\PROGRAM FILES\MICROSOFT GAMES\FLIGHT SIMULATOR 9\MODULES\FSUIPC.DLL

This is the first time I have had any problems of this Nature as I have been a registered user of both FS9 & FSX for a few years, also Spyware Doctor has been purring along quite happily with my Flight Sims, so is it posible that the website-http://www.schiratti.com/dowson.html- has somehow been invaded by this particular Trojan? or is there something new within the latest FSUIPC that causes the Spyware Doctor to recognise it as the Trojan Virtumonde ?

Any advice would be much appreciated as obviously I cant use my Add-Ons without FSUIPC. :(

Thankyou, Mike.

[Pete Dowson]

Yesterday I D/loaded the latest Version of FSUIPC for FS9 and FSX I keep getting the following Error Message when I attempt to start FS9

All my FS programs are compressed & encoded (which will make them contain meaningless non-program bit patterns) and code-signed, to prevent tampering and infiltration. If any security program finds a problem with them it will therefore be a false alarm. You should report it to the suppliers of that program so they can make their code more reliable.

Any advice would be much appreciated as obviously I cant use my Add-Ons without FSUIPC.

Just check the signature -- right-click on the DLL and select Properties-Signature, then select the signature itself, ask for details, and make sure it says it is okay. That is your guarantee that it has not been tampered with and carries no malicious code.

As I said, the code is not even visible in the file to any checker as it is compressed and encoded.

Regards

Pete

[BROGS]

Many Thanks Pete.