False positive Avira Trojan-Warning for Desura dll

Published: 05/21/12 10:19 AM


Starting the Desura-Client with standard-settings will drop some some dlls into the folder

C:\ProgramData\Desura\DesuraApp\GDF\

on a Windows-System.

The dlls have numeric filename-prefixes, but it’s always the same numbers (so I guess each dll maps to an installed game).
For some days now, everytime I started the Desura-Client, Avira warned about a Trojan:

TR/Kazy.65525.12 in C:\ProgramData\Desura\DesuraApp\GDF\54528904790048.dll and in C:\ProgramData\Desura\DesuraApp\GDF\RCX3C2D.tmp

It was always the same dll-filename.

According to the Desura-Support, this is a false positive. (Thus it’s actually not a Trojan according to the Desura-Support)

However: I was wondering what these dlls are for. Apparently these dlls are used to display the games in the start-menu -> games folder.
Checking the option “disable windows games explorer” in the client settings solved the issue, so that dlls are not being created on startup anymore.


Kommentieren Sie diesen Artikel

Netbeans Platform development with maven: Troubleshooting

Netbeans Maven: Xml Editor using Xam, Schema validation and Schema-aware completion