Member Avatar for boss16thugz

Hi,

This site helped me before when my old laptop got spyware and through your help it was cleaned.

However, I have this problem today. I have this trojan horse Downloader.UHT my AVG will heal it but then when I install back my application (Cabal.exe) it keeps on coming back.

How can I delete it wherein I can still install my application?

Hope you can help me.

Thanks a lot.
Angela

  • 5 Contributors
  • 14 Replies
  • 232 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by boss16thugz

Dani AI

Generated

This thread shows AVG flagging Cabal.exe as "Downloader.UHT." correctly pointed at packer/heuristic detections and noted that switching engines changed the result; later reported Avast stopped the alert. Those outcomes are common because different scanners use different heuristics, but changing AVs only treats the symptom — verification of the executable is the important next step.

Checklist to determine true infection vs false positive:

  • Confirm the executable came from the official game publisher (no cracks or unofficial patches).
  • Compute a file hash and compare it to a known-good copy or freshly downloaded installer.
  • Scan the file with multiple engines (multi‑engine online scanners) to see whether the detection is widespread or isolated.
  • Check the file's digital signature and file properties for suspicious modification.
    A simple Windows hash command:
    certutil -hashfile "C:\path\to\Cabal.exe" SHA256

If the file looks clean across multiple scanners and matches the vendor copy, submit the sample to AVG as a false positive for reclassification and request an update to definitions. For short-term play without disabling protection, run the game in an isolated environment (air‑gapped or sandboxed) or create a narrowly targeted exclusion for the verified install folder only. If several engines flag the file or the EXE was from an untrusted/cracked source, assume compromise: remove the file, run a full scan with a different reputable scanner, and reinstall from the official distributor.

For behavioral checks and persistence hunting, use Process Explorer and TCPView to watch outbound activity, and Autoruns to find startup entries. Follow ’s safe‑mode removal approach when an AV cannot clear persistent components, but avoid formatting unless all recovery and clean‑install options have been exhausted. Back up important data and prefer official installers — pirated or altered game EXEs remain a common trojan vector.

Recommended Answers

All 14 Replies

Member Avatar for boss16thugz

Please HELP me!!! Thanks a lot.

Member Avatar for gerbil

Cabal.exe, the game file? And AVG AS is detecting it? That would be because it is packed [and the packer wrapper shows up] and many AV/AS wares pick up the packers as Trouble: viruses etc often use packers to disguise their files, to avoid strings being recognised. Set your AVG to ignore it, cos for "heal" you should read "break" in this case...
Lessee... in Scanner, Settings set Quarantine as the default action;
Then in Infections, Exceptions add a rule to ignore it.

Member Avatar for boss16thugz

Since Im using AVG FRee Edition can;t find this "Lessee... in Scanner, Settings set Quarantine as the default action;Then in Infections, Exceptions add a rule to ignore it." Hope you can still help me. When I Open the file the the AVG notifier prompts me, I click Ignored but then I cannot access the file anymore.

Cabal.exe, the game file? And AVG AS is detecting it? That would be because it is packed [and the packer wrapper shows up] and many AV/AS wares pick up the packers as Trouble: viruses etc often use packers to disguise their files, to avoid strings being recognised. Set your AVG to ignore it, cos for "heal" you should read "break" in this case...
Lessee... in Scanner, Settings set Quarantine as the default action;
Then in Infections, Exceptions add a rule to ignore it.

Member Avatar for boss16thugz

By the way, I'm just using the AVG Free Edition. So I don;t see the menu you told me on your last post.

Member Avatar for gerbil

Yeah... if you run a proper firewall [not windows one-way deal] it would detect if a trojan was trying to call out and warn you. The game file is okay, though, it is a false alarm.
You are using AVG AS?

Member Avatar for Doctor Inferno

Isn't Cabal.exe an executable of a game called "Cabal Online"?

Member Avatar for boss16thugz

Last week when Im using this file its still ok...just today i encountered this problem..

Member Avatar for gerbil

Yeah, but is the problem with AVG AS or AVG AV?
AVG AV does funny stuff... for a while it suddenly started picking up my IceSword, did it a couple of times, and breaking it, and then it just started ignoring it. Dunno what that was about...
If it is AVG AV doing over cabal.exe, go into the virus vault and select cabla.exe, hit the restore button. That's gotta be quicker than reinstalling the game. And it should learn from that.

Member Avatar for boss16thugz

yes, it is the executable file of Cabal Online

Isn't Cabal.exe an executable of a game called "Cabal Online"?

Member Avatar for boss16thugz

It's AVG AV who's giving me problem. When Im ignoring it, it destroys the Cabal.exe so I cannot use it anymore. I don't know what to do..Hope someone can help me.

Yeah, but is the problem with AVG AS or AVG AV?
AVG AV does funny stuff... for a while it suddenly started picking up my IceSword, did it a couple of times, and breaking it, and then it just started ignoring it. Dunno what that was about...

Member Avatar for crunchie

Get rid of AVG and install Avast free.

Member Avatar for Mukesh singh

First u tell me which OS u r using now. if u r using client OSys ten u can simply press DEL OR F10 while rebooting and from the safe mode u do following task:-
1:- uninstall your Anti-virus.
2:- manually delete backup fills which r save in your primary drive .
3:- After that install latest Anti-virus with the third party software.
4:- reboot the system.
5:- scan your computer.

and if u r still getting facing the problem then format u'r primary drive.

Member Avatar for crunchie

First u tell me which OS u r using now. if u r using client OSys ten u can simply press DEL OR F10 while rebooting and from the safe mode u do following task:-
1:- uninstall your Anti-virus.
2:- manually delete backup fills which r save in your primary drive .
3:- After that install latest Anti-virus with the third party software.
4:- reboot the system.
5:- scan your computer.

and if u r still getting facing the problem then format u'r primary drive.

Please use correct english please. Leet speak is against Daniweb rules which you agreed to when you signed up :).

We strive to be a community geared towards the professional. We strongly encourage all posts to be in full-sentence English. Please do not use "leet" speak or "chatroom" speak.

http://www.daniweb.com/forums/faq.php?faq=daniweb_policies

Member Avatar for boss16thugz

Thanks so much!! I removed AVG AV and installed AVAST, and now I can play my Cabal.exe..

And to other who helped me as well, thank you so much.

Get rid of AVG and install Avast free.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.