Originally Posted by
Rvg72
Everything in the C:\users\username\appdata\xenode\appliancecaches folder are virtualized versions of Holdem manager. We use the xenocode software to virtualize and protect the code and these are basically temporary folders that are left behind.
I believe what is happening is that when xenocode virtualizes those conime.exe and msiexec.exe programs (which are windows programs) in order for it to be usable by HM they move copies of them to those folders. The AV software looks at these windows files and sees them running in non windows\system folders and generates the alert.
You can actually reboot and delete all the folders under C:\users\username\appdata\xenode\appliancecaches and then relaunch HM. It will create one new folder (which could be picked up by the anti virus software as a false positive) but those other ones likely aren't even active
Roy