Clubbox engine programm dll/exe suddenly a Trojan virus?

Sorry to ask this here, hope somebody can help me.

I've been using clubbox alongside torrents for years, never had a problem. Every now and then the clubbox program starts an update and usually you just click "OK" and the installation process for the updated version for your clubbox starts.

Now for 3 days I've been getting an alarm message by my anti-virus programm, that the "downengine.dll" (that has to install itself into the system32 tray) , is a TROJAN (!) - TR/Spy.NowStarter.B - or something.

Now I am not familiar with Trojan names enough to know what the deal is plus I don't know why suddenly Clubbox is having a Trojan in its updated program.
The options (beside putting it in quarantine or denying access to the Trojan) are to "ignore" it or "rename" it, and I don't know if that's a smart idea... I don't want to try that just like that. The other options, of course, stop the Clubbox Update and the program won't work anymore.

I can't use my clubbox anymore and it's really a rather big problem for me, so I hope some kind soul knows a way to help me out or has heard something about this Trojan problem.

I'd be so so grateful

thank you so much for reading.

Posted: Fri Feb 08, 2008 7:42 am Post subject: Post Rating: 0

I'm not a user of clubbox, so I cannot get into the specifics of that application.

It could actually be true that your clubbox installation is infected. I would recommend uninstalling the clubbox software completely, re-scan and continue to clean your PC, and then re-download and install from a reliable source.

It may also be a false positive. Although it is numerically rare, it is possible for a "signature" of a vulnerable piece of code to match a legitimate application. This has happened to me twice in the past. Both times, the problem was cured with the another update released a few days later for the anti-virus tool. In the meantime, I just instruct the AV tool to ignore the mistaken application. I personally use AVG, and you can instruct it to ignore a file by name.

--- groink

Posted: Fri Feb 08, 2008 8:27 am Post subject: Post Rating: 0

I will definitely try that option for the virus scan once, thank you for your answer!!

I've never before downloaded a clubbox tool from any site but clubbox (since it installs itself when you try to download some video file within a clubbox for example), so when I tried to get the program from a different reliable site and install it, clubbox still initiated its update when I wanted to download something and the Trojan notice came again (T_T)

I cannot uninstall clubbox since it's not inside the software list, I don't know how to say this in English, but it's just a temporary program which updates all the time, (probably should look into how to actually get it out of the system completely, but it's not possible with just trying to search for "clubbox" or "downengine" etc, ibecause the only thing you get is the latest portion (of clubbox.exe and downendinge.zip that's inside your Temp or System folder and deleting those hasn't shown any effects when retrying the download)

Once again, thank you so much for taking the time to answer!! (T__T) I'll try switching to AVG and meanwhile wait if some other poor sould experienced the same problem and knows what to do in this specific case.

Posted: Sun Feb 10, 2008 2:05 am Post subject: Post Rating: 0

I'm having exactly the same problem & I really don't know what to do --
Acutally I'm about to change my Anti-Vir Program but somehow I don't feel good doing this;

Posted: Sun Feb 10, 2008 2:12 am Post subject: Post Rating: 0

Hmm, that's weird. I'm downloading from clubbox this moment, and it didn't ask me to install anything that's "downengine.dll" or trojan like you guys mentioned. I even did a scan too in case I caught it and I didn't know it. So far, everything is fine for me, not sure about you guys... Unsure

Posted: Sun Feb 10, 2008 2:16 am Post subject: Post Rating: 0

Maybe it's really the anti-virus program we are using..
I use Avira AntiVir..
But I just can't imagine that AntiVir gives me a trojan horse repport when there's none o.o

Posted: Sun Feb 10, 2008 2:56 am Post subject: Post Rating: 0

I'm having the same problem too! Yea using Avira AntiVir too.. Guess we gotta uninstall this virus programme in order to use clubbox

Posted: Sun Feb 10, 2008 1:45 pm Post subject: Post Rating: 0

FINALLY my problem was solved. I checked the clubbox community on livejournal, and there was somebody with the same problem and it got solved. Similar to what groink said before, you have to ignore it. But in my case just the "ignore" button won't do, you have go to the configurations of your antivirus programm (Yumi! Jereriviel! I have Antivir, too, and it worked!) in both "Scanner>Search" and "Guard>Search" you need to go to "exceptions", there will be a button with a browse option from where you can find the file you want antivir to ignore (probably should be 'Windows/system32/downengine.dll' for you, too). Once added in both sections, click "OK" and restart your computer. If it stilld oesn't work, check your antivir again whether it's really inside both exceptions/ignore lists, then restart again.
For me it worked after a few times. I hope it'll work for you, too.
Since other people have changed this option a few days ago and haven't had any problems with their computer etc, and since the Trojan isn't listed on any of the "malware" trojan lists with damage, I think it should be safe if you try it. I haven't experienced any problem since then.

thanks to the helpers on clubbox comm! (don't want to spread their names without consent)

Posted: Sun Feb 10, 2008 8:42 pm Post subject: Post Rating: 0

to limbolimbo: thanks a lot! I'll try that out -- hope it works;;
but still; somehow i don't really trust cb anymore T_T

Posted: Mon Feb 25, 2008 1:34 am Post subject: Post Rating: 0

I haven't downloaded from ClubBox for a couple of months but also ran into this problem with the latest update. I threw caution to the wind and grabbed the file anyway. I figure if this was really an issue everyone would be jumping up and down about it... I was able to install the latest CB version and download what I'm looking for.