VMware Workstation 6 Win32:Dropper-GT [Trj]

[AHRIMANSEFID]

Hi All.
Me Run VMware Workstation 6 Avast Find File ( Windows XP Professional.vmdk ) Win32:Dropper-GT [Trj].
WHEREFORE
Plz Help For Fix.
Thanks.

[Scan]

Maybe its not a trojan and 99% its True.
I downloaded vmware player Before (Free version) I Ask you to be ware

Right after installing, serval services started for no reason and i haven't entered any OS (i didn't even have any idea what i am doing when i downloaded that) and Next to that internet connection Dropping all sudden DHCP Attacks and next to all of this My Firewall Turned Off and All My Ports Were opened and sharing files becomes enabled by Firewall and system.

I Really Really Really don't Recommend you to Ignore this case.
I don't know who are the hackers behind this i don't know if its the vmware company its self....

and this is the part that will hopefully make you listen:

http://ubuntuforums.org/showthread.php?t=180479


Oh and by the way the Trojans i have found were in TMP Folder were Trojan agent and another PDF Expoilt Trojan.

More from that , Hackers them selfs admit how they Do it to the victim:

http://hackaday.com/2005/10/24/how-to-vmware-player-modification/

i sure hope you learn to be careful not learn to hack...

[Brandon72196]

Maybe its not a trojan and 99% its True.
I downloaded vmware player Before (Free version) I Ask you to be ware

Right after installing, serval services started for no reason and i haven't entered any OS (i didn't even have any idea what i am doing when i downloaded that) and Next to that internet connection Dropping all sudden DHCP Attacks and next to all of this My Firewall Turned Off and All My Ports Were opened and sharing files becomes enabled by Firewall and system.

I Really Really Really don't Recommend you to Ignore this case.
I don't know who are the hackers behind this i don't know if its the vmware company its self....

and this is the part that will hopefully make you listen:

http://ubuntuforums.org/showthread.php?t=180479


Oh and by the way the Trojans i have found were in TMP Folder were Trojan agent and another PDF Expoilt Trojan.

More from that , Hackers them selfs admit how they Do it to the victim:

http://hackaday.com/2005/10/24/how-to-vmware-player-modification/

i sure hope you learn to be careful not learn to hack...

Umm, that hackaday article was just a way to get  copies of an OS onto vmware player, before it could make VM's.
I have VMware workstation installed and it works fine on windows 7.
Also, that thread was on Ubuntu and apparently it was the persons mistake.
When it detects it click on report as false positive than quarantine it and we shall see if it is one. Also, did you download it from the VMWare site?

[Scan]

that was from UB site Yes But he spoke of VMWAREPLAYER he said once he installed it, some thing hooked into his system.
Same happend to me for some reasons
But i am not sure i may have downloaded a work station not sure maybe its what contained the trojan.

Otherwise i would probably look back at the victim like me who had his computer hacked and getting messages like 'Machine Check : Regs' in event viewer and his internet Going down some times (DHCP Loss) and contacting a random server to Gain an Unsecured service.

wow i don't even have to tell that 'imapi CD Rom service started'

[Brandon72196]

that was from UB site Yes But he spoke of VMWAREPLAYER he said once he installed it, some thing hooked into his system.
Same happend to me for some reasons
But i am not sure i may have downloaded a work station not sure maybe its what contained the trojan.

Otherwise i would probably look back at the victim like me who had his computer hacked and getting messages like 'Machine Check : Regs' in event viewer and his internet Going down some times (DHCP Loss) and contacting a random server to Gain an Unsecured service.

wow i don't even have to tell that 'imapi CD Rom service started'

I have also installed VMWare player on this machine. Again, it worked fine, no alerts or anything, but I have since uninstalled it.
Where did you get the download for VMWare player? Was it from VMWare.com? What version was it?
Thanks.

[Scan]

i formatted my computer.
but before i found trojan Expoilts my OS security allowing file Sharing and Even Event Viewer Starts Random servies autmaticly and i keep getting 'Machine check' then 'Machine Check : Registery' i was using XP.

I Checked the Trojan Before Removing it and found it was Created on the date i installed vmware player and i saw another one named Trojan agent both were in TMP Folder i am sure i downloaded it from the Offical web site.

but i do admit i think i downloaded some one's work station so it might be the reason But suspesiouly that the one on UB never ran any work stations.
List of services suddenly starts:

'SS Discovery - Remote Registery - Telephoney Service' those from what i can Remmber. oh and imapi CD Rom service.
and i also found a weird folder with a strange random name i found 'Spu' 'Spu Uninstall' i tried to enter them but i get access is denied it was on one of my HDD Drivers.