usnewflorida
Gold PlayerGold Player
newflorida's picture
Joined: 10 Mar 2013
Posts: 502
Thanks given: 177
Thanks received: 381
31 July 2019 - 1:00pm

Virus Issue with Intertops Casino?

3 replies • Last post

I play at several RTG casinos. I use Bitdender Total Security for firewall and anti-virus protection. Lately, I have been getting a virus message when I try to access cashier to deposit money or when I try play certain games at Intertops Casino. The message usually warns me that the casino software is attempting to download infected files to my computer.

This is a link to the virus infected page (http://www.filertgacdn.eu/client/pkgs/intertops/package_list.ini.crc?fak...) that the casino software tries to download from. The number 5 keeps changing into other numbers depending on the game.

I try to go directly to that page using my browser but Bitfender blocks me from proceeding saying that the page is infected.

My question is: Is Intertops' software infected? If it is a false positive, why is it the only casino that why I am having this issue with.

intertops-virus-1.png
bitdefender-intertops.png
auCL-Ed
StaffStaff
CL-Ed's picture
Location: Sydney
Joined: 7 Sep 2007
Posts: 9441
Thanks given: 5398
Thanks received: 4774
1 August 2019 - 5:32am
#1

I'd say its a false positive.

Maybe that domain name - filertgacdn.eu - has been used to distribute other malware in the past so they have it flagged. The "cdn" part of the domain suggests it is a content distribution network which is essentially a tool for distributing files around the world efficiently. It is something used by almost all major websites to reduce bandwidth served by their own web servers.

I downloaded the package_list.ini.crc file you linked and it is a simple text file with only 10 characters in it:

2999643402

So it isn't a bit of malware or an infected file, its just a simple short text file file. Notice it is a ".crc" file. This may be a clue. CRC stands for Cyclic Redundancy Check in computing. A CRC code is used to verify that a file has not been changed or tampered with. Even a single character change to a file will cause the CRC value to completely change. So you can compare a file's CRC against a known good value to make sure it is an exact copy.

So perhaps the casino is checking its own software against a CRC value to ensure you haven't downloaded a copy that has been tampered with? It would be ironic if that process was what was causing virus warnings.

coolsongss

Always play it safe! Consult our list of rogue casinos and warnings before depositing at a new casino.
Post in our forums to earn CLchips which can be used to buy real prizes in our CLchips shop.

usnewflorida
Gold PlayerGold Player
newflorida's picture
Joined: 10 Mar 2013
Posts: 502
Thanks given: 177
Thanks received: 381
1 August 2019 - 9:41am
#2
CL-Ed wrote:

I'd say its a false positive.

Maybe that domain name - filertgacdn.eu - has been used to distribute other malware in the past so they have it flagged. The "cdn" part of the domain suggests it is a content distribution network which is essentially ...

Thanks Ed. I was concerned about that because I have never seen any other casino software behave this way. I will just whitelist the link.

devomvom12
True PlayerTrue Player
vomvom12's picture
Location: earth
Joined: 28 Jan 2018
Posts: 928
Thanks given: 840
Thanks received: 916
1 August 2019 - 7:09pm
#3

i had a similar problem years ago when i was playing almost only poker.
any poker room software or casino software was detected as malware by avira antivir.
and it was always a false positive.
as it turned out, it was a simple software setup thing

newflorida