3Dice, virus???

[parpol]

Hi, I launched the casino but is blocked, the virus finds traces! I removed and reinstalled but the problem persists!
What to do?
Thanks

[RobWin]

Parpol, it's most likely just a false positive threat but here is some more info for you to check out.....

Trojan-Dropper.Delphi.Gen Threat Display

Copyright © 2009 Sunbelt Software.

Trojan-Dropper.Delphi.Gen

Name Trojan-Dropper.Delphi.Gen

Type Malware

Type Description Malware ("malicious software") consists of software with clearly malicious, hostile, or harmful functionality or behavior and that is used to compromise and endanger individual PCs as well as entire networks.

Category Trojan Downloader

Category Description A Trojan Downloader is a program typically installed through an exploit or some other deceptive means and that facilitates the download and installation of other malware and unwanted software onto a victim's PC. A Trojan Downloader may download adware, spyware or other malware from multiple servers or sources on the internet.

Level High

Level Description High risks are typically installed without user interaction through security exploits, and can severely compromise system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These risks may also collect and transmit personally identifiable information (PII) without your consent and severely degrade the performance and stability of your computer.

Advice Type Remove

Release Date
Last updated on Mar 23 2009

File Traces
4.exe
499.exe
5.exe
76046_8362096_ldr.exe
a6.exe
AccessMediaDownload.exe
andt.sys
avto.exe
baracudanew.exe
c-setup.exe
cj.exe
cj1.exe
cj10.exe
cj11.exe
cj2.exe
cj6.exe
cj8.exe
cj9.exe
Cl-p.exe
d.exe
Downloader.exe
e264caf1-3fdf-42bd-8930-3a1c7a52d7d3.exe
file495.exe
gmsex.exe
iexplorer.exe
index0.exe
install-10-50.exe
kok2.exe
ldr.exe
load.exe
load[1].exe
msram.exe
naked164.com
ntos.exe
p.exe
pav.exe
PIC.exe
ru.exe
runsql.exe
serena.exe
service.exe
setup.exe
sv.exe
svc.exe
svchost.exe
svhoster.exe
svzip.exe
teste1_p.exe
vhosts.exe
WebVideoSetup.exe
win.exe
winlogon.exe
xxxmediacodec.exe

[KasinoKing]

Originally Posted by parpol

Hi, I launched the casino but is blocked, the virus finds traces! I removed and reinstalled but the problem persists!
What to do?
Thanks

I have the exact same problem!
I got on live chat to Enzo about it - he said just add it to my ignore list.
But I didn't fancy doing that - so I deleted it.
However, now I can't start 3Dice!

This must be a recent change they did; it's my laptop where it wont work and I only downloaded a few days ago.
On my PC, where I downloaded years ago, it works fine.

Bloody annoying!

[vinylweatherman]

Originally Posted by KasinoKing

I have the exact same problem!
I got on live chat to Enzo about it - he said just add it to my ignore list.
But I didn't fancy doing that - so I deleted it.
However, now I can't start 3Dice!

This must be a recent change they did; it's my laptop where it wont work and I only downloaded a few days ago.
On my PC, where I downloaded years ago, it works fine.

Bloody annoying!

Purveyors of legitimate software should make more effort to ensure their product does not trigger alarms with mainstream anti-virus products. While 3Dice might be trusted, it is always possible that some malicious hacker hacked their site, or even built a dummy version and used phishing, and tellimg players to simply ignore such alarms because they are bound to be false ends up making things easier for the malware producers and distributers.

The cause may be the somewhat illogical insistence of foisting these "download managers" on us, rather than letting us use our native browser and/or OS functionality to download the entire installer. With each supplier having their own, often different, bespoke download managers, user's PC's can get bogged down with several of these applications. Some trigger virus alerts, but the others can simply produce instabilities in the OS, resulting in those rather curious errors that players post about - such as being unable to open the RTG cashier, when 99% of the rest of us have no such problems.

The screenshot in this case seems to be one where access to the internet is being requested, but the 3Dice download manager having been mistaken for this trojan. These small casino download managers are executable files whose function is to connect to the internet and download the "big" program, and then execute it to install the casino. It is this "phone home" aspect of these applications that triggers anti-virus and firewall software to consider the program a potential threat if it resembles any of the malicious code fragments from it's detection database.

If the casino is a trusted one, and you are SURE it came from the genuine website, i.e, you didn't find it through a link in a spammy email, it should be OK to "grant access" in these cases.

[catrina m]

Especially vista

it asks permission for everything

which is cool, but it is just like any software

exploitable, and someone, somewhere will exploit it

Isn't it just a fact?

[KasinoKing]

Originally Posted by vinylweatherman

Purveyors of legitimate software should make more effort to ensure their product does not trigger alarms with mainstream anti-virus products. While 3Dice might be trusted, it is always possible that some malicious hacker hacked their site, or even built a dummy version and used phishing, and tellimg players to simply ignore such alarms because they are bound to be false ends up making things easier for the malware producers and distributers.

Something I forgot to mention above, is I also got this virus alert when I tried to start a different casino (NOT 3Dice); i.e. When I tried to launch, it gave an alert to a virus in a 3Dice exe...

[3Dice]

Hi Guys,

This is a false positive that Avira reports on the 3Dice installer file. Other scanners Avast, Norton, AVG and Eset antivirus in their latest incarnations all declare the installer file clean. (and they all detect the Delphi.gen dropper). With the large amount of antivirus software out there it is unfortunately impossible for any developer to check for all potential false positives. We do our tests with the most commonly used scanners and even tho it is easy for us to guarantee that the 3Dice software is virus free - it is quite another story to be able to guarantee that no scanner software out there will show false positives.

Since the false positive is only on the installer file - you can easily disable the scanner during install, then once you've installed delete the installer file (3Dice_mini_install_xxxx.exe) and scan your system again.

As a sidenote, I hadn't heard of the avira antivirus before and in our tests we also noticed that it is quite a bit more resource-heavy (=slows down your computer) than the more popular and common scanners like e.g. avast (free home edition available).

KK, if you are uncomfortable disabling your scanner during the install, you can also copy your "program files\3Dice casino" from your other machine as the 3Dice software should work without installation procedure.

Kindest Regards,

Enzo


-- screenshot of AVG on the same file --

[parpol]

Originally Posted by 3Dice

Since the false positive is only on the installer file - you can easily disable the scanner during install, then once you've installed delete the installer file (3Dice_mini_install_xxxx.exe) and scan your system again.

Ok, perfect! Works. Thanks