PDA

View Full Version : Is this virus?



mode8
10-26-2012, 07:41 AM
Hello i have Pro Combo version of HM1 and i was using it for years. Today i received the following message from my antivirus program:

Detected item: Trojan:Win32/Bocinex.E

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Users\Intel\AppData\Roaming\HoldemManager\ svhost.exe
process:pid:3576
regkey:HKCU@S-1-5-21-3925907292-527319283-2939756676-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN \\Service Host
runkey:HKCU@S-1-5-21-3925907292-527319283-2939756676-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN \\Service Host

Get more information about this item online.

Can someone explain it please?

Patvs
10-26-2012, 10:25 PM
We don't use : C:\Users\%username%\AppData\Roaming\HoldemManager\ svhost.exe
So just delete the file.