6.5 B7: Downloads $R0G7HWC.exe when run...

[chaznet]

Norton Antivirus alerts me that $R0G7HWC.exe is being downloaded from newsbin.com when I run beta 7 of Newsbin 6.5.

It rates the location the download is coming from as 'safe', but other characteristics as 'unknown'.

What's the executable doing after it downloads?

[Quade]

It's not downloading that. Not in any of my code anyway. It checks whether it's supposed to pop up the MOTD window. I wonder if that's what it's reporting?

What's the actual URL?

[chaznet]

http://www.newsbin.com/download.php?reg ... ion=6.50B7

Not sure why, but it shows the file itself as being in the Recycle Bin: c:\$Recycle.Bin\S-1-5-21-1823216865-2451182598-2167442625-1001\$R0G7HWC.exe