network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 5 months |
| seen | Jan 10 at 18:27 | |
| stats | profile views | 2 |
|
Jan 6 |
awarded | Scholar |
|
Jan 6 |
awarded | Supporter |
|
Jan 6 |
accepted | Strange file named Aview.exe - WinClient |
|
Jan 6 |
comment |
Strange file named Aview.exe - WinClient Thank you, this solves the mystery. It may have been bundled with some other KVM related program because I've never seen this one. |
|
Jan 5 |
revised |
Strange file named Aview.exe - WinClient edited tags |
|
Jan 5 |
revised |
Strange file named Aview.exe - WinClient added 776 characters in body |
|
Jan 5 |
comment |
Strange file named Aview.exe - WinClient I've uploaded them again, added more info above. Also added a trace log, worth taking a look at it. |
|
Jan 5 |
revised |
Strange file named Aview.exe - WinClient added 776 characters in body |
|
Jan 5 |
revised |
Strange file named Aview.exe - WinClient added 776 characters in body |
|
Jan 4 |
comment |
Strange file named Aview.exe - WinClient how did you discover this? I ran a search on my HDD and found C:\Windows\Downloaded Program Files\WinClient1.ocx which matches the Date Created timestamp of the previous files - 5.7(July).2012, 20:43. The other 3 files in the archive are created after this one, at 20:44. |
|
Dec 28 |
comment |
Strange file named Aview.exe - WinClient ah, nice. anyone running NOD32 please submit it to them. |
|
Dec 25 |
awarded | Editor |
|
Dec 25 |
revised |
Strange file named Aview.exe - WinClient added 166 characters in body |
|
Dec 25 |
comment |
Strange file named Aview.exe - WinClient Already tried it in a VM. It executes only once - can see the process in Task Manager. Subsequent executions result in the following error: "Register Winclient fail!". If I close the process and run AView.exe again, it errors out without remaining started. I can reproduce this behavior by creating a new local user and running the exe again. It obviously does some changes to the local user. |
|
Dec 25 |
awarded | Student |
|
Dec 25 |
comment |
Strange file named Aview.exe - WinClient Indeed, that makes it even more suspicious. No idea what to do next though.. I'm trying some 3rd party firewalls with more control than the Windows default one. |
|
Dec 25 |
comment |
Strange file named Aview.exe - WinClient Here's the links: virustotal.com/file/… and virusscan.jotti.org/en/scanresult/… Should that 1 result be a false positive? |
|
Dec 25 |
asked | Strange file named Aview.exe - WinClient |
