RE: [Full-Disclosure] I'm looking for information about a file called winfix3.exe

From: Harlan Carvey (keydet89_at_yahoo.com)
Date: 05/04/04

  • Next message: xbud: "Re: [Full-Disclosure] IPSEC on arm-linux board" 
    To: "Dolinar, Jon" <Jon.Dolinar@tri-c.edu>, Stacey Katz <skatz@dawsoncollege.qc.ca>, full-disclosure@lists.netsys.com
Date: Tue, 4 May 2004 12:00:51 -0700 (PDT)

    Jon,

    Interesting info...did you happen to read it?

    The posts seem to indicate that someone else found
    this process running, but was not able to locate an
    executable image (the actual binary file). However,
    in the case of the OP (original poster), there should
    an executable image file available.

    We'll have to see what Stacey provides...

    --- "Dolinar, Jon" <Jon.Dolinar@tri-c.edu> wrote:
    > Found some info at
    >
    http://communities2.microsoft.com/communities/newsgroups/en-us/default.aspx?
    >
    query=winfix3&dg=&cat=en&lang=en&cr=&pt=&catlist=&dglist=&ptlist=
    >
    > Looks like a version Randex.Gen
    >
    > -----Original Message-----
    > From: full-disclosure-admin@lists.netsys.com
    > [mailto:full-disclosure-admin@lists.netsys.com] On
    > Behalf Of Stacey Katz
    > Sent: Tuesday, May 04, 2004 11:28 AM
    > To: full-disclosure@lists.netsys.com
    > Subject: [Full-Disclosure] I'm looking for
    > information about a file called
    > winfix3.exe
    >
    > Hi,
    >
    > I hope you can help. I'm looking for information
    > about a file called
    > winfix3.exe
    >
    > We have tried Mcafee, Norton and AdAware to try to
    > find the potential virus
    > or piece of malware.
    >
    > I have tried google. There is not much information
    > out there.
    >
    > The application seems to start with windows via a
    > reg setting. It generates
    > lots of network traffic.
    >
    > Any help or information would be appreciated.
    >
    > Stacey
    >
    >
    > ===============================
    > Stacey Katz <skatz@dawsoncollege.qc.ca>
    > Computer Technician
    > Dawson College
    > 3040 Sherbrooke West, Room 2H.12
    > Westmount, Quebec Canada H3Z 1A4
    > 514-931-8731 ex 5149
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter:
    > http://lists.netsys.com/full-disclosure-charter.html
    >

    > ATTACHMENT part 2 application/x-pkcs7-signature
    name=smime.p7s

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: xbud: "Re: [Full-Disclosure] IPSEC on arm-linux board"

    Relevant Pages