Jump to content
AIDA64 Discussion Forum
szrobi

Known Malicious traffic between PC and aida64 server

Recommended Posts

IDS detect network trojan traffic between PC and Aida64 server (82.131.160.82). It is more or less continuous (not only update/check)

Signature: ET TROJAN Known Malicious User-Agent (x) Win32/Tracur.A or OneStep Adware Related

What traffic is suppose to happen between this server and a client using the software?

Share this post


Link to post
Share on other sites
1 hour ago, szrobi said:

IDS detect network trojan traffic between PC and Aida64 server (82.131.160.82). It is more or less continuous (not only update/check)

Signature: ET TROJAN Known Malicious User-Agent (x) Win32/Tracur.A or OneStep Adware Related

What traffic is suppose to happen between this server and a client using the software?

I'm pretty sure that activity is not related to the clean AIDA64 build that you can download from our website.  Your AIDA64 copy may be infected or otherwise altered (cracked, hijacked, etc).

Basically there are 2 distinct internet activities that AIDA64 performs between the user's computer and our servers.  The first one is related to the auto-update feature, and should happen in the frequency you choose in AIDA64 / main menu / File / Preferences / General / NetUpdate.  You can completely disable the auto-update check there, if you wish.

The other activity only happens if you have the External IP Address sensor item placed on your OSD Panel, SensorPanel, LCD, log file, or used as an External Applications item.  That activity is repeated every 15 minutes while you keep AIDA64 running.  It simply pings our servers to obtain the external IP address of the user's computer.  The repeat frequency is set to 15 minutes in order to avoid putting too much pressure on our servers.

  • Like 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...