113 reputation
4
bio website
location
age
visits member for 1 years, 4 months
seen Jan 10 '13 at 18:27

Jan
6
awarded  Scholar
Jan
6
awarded  Supporter
Jan
6
accepted Strange file named Aview.exe - WinClient
Jan
6
comment Strange file named Aview.exe - WinClient
Thank you, this solves the mystery. It may have been bundled with some other KVM related program because I've never seen this one.
Jan
5
revised Strange file named Aview.exe - WinClient
edited tags
Jan
5
revised Strange file named Aview.exe - WinClient
added 776 characters in body
Jan
5
comment Strange file named Aview.exe - WinClient
I've uploaded them again, added more info above. Also added a trace log, worth taking a look at it.
Jan
5
revised Strange file named Aview.exe - WinClient
added 776 characters in body
Jan
5
revised Strange file named Aview.exe - WinClient
added 776 characters in body
Jan
4
comment Strange file named Aview.exe - WinClient
how did you discover this? I ran a search on my HDD and found C:\Windows\Downloaded Program Files\WinClient1.ocx which matches the Date Created timestamp of the previous files - 5.7(July).2012, 20:43. The other 3 files in the archive are created after this one, at 20:44.
Dec
28
comment Strange file named Aview.exe - WinClient
ah, nice. anyone running NOD32 please submit it to them.
Dec
25
awarded  Editor
Dec
25
revised Strange file named Aview.exe - WinClient
added 166 characters in body
Dec
25
comment Strange file named Aview.exe - WinClient
Already tried it in a VM. It executes only once - can see the process in Task Manager. Subsequent executions result in the following error: "Register Winclient fail!". If I close the process and run AView.exe again, it errors out without remaining started. I can reproduce this behavior by creating a new local user and running the exe again. It obviously does some changes to the local user.
Dec
25
awarded  Student
Dec
25
comment Strange file named Aview.exe - WinClient
Indeed, that makes it even more suspicious. No idea what to do next though.. I'm trying some 3rd party firewalls with more control than the Windows default one.
Dec
25
comment Strange file named Aview.exe - WinClient
Here's the links: virustotal.com/file/… and virusscan.jotti.org/en/scanresult/… Should that 1 result be a false positive?
Dec
25
asked Strange file named Aview.exe - WinClient