Page 1 of 1

6.5 B7: Downloads $R0G7HWC.exe when run...

PostPosted: Wed May 15, 2013 5:00 pm
by chaznet
Norton Antivirus alerts me that $R0G7HWC.exe is being downloaded from newsbin.com when I run beta 7 of Newsbin 6.5.

It rates the location the download is coming from as 'safe', but other characteristics as 'unknown'.

What's the executable doing after it downloads?

Re: 6.5 B7: Downloads $R0G7HWC.exe when run...

PostPosted: Wed May 15, 2013 5:02 pm
by Quade
It's not downloading that. Not in any of my code anyway. It checks whether it's supposed to pop up the MOTD window. I wonder if that's what it's reporting?

What's the actual URL?

Re: 6.5 B7: Downloads $R0G7HWC.exe when run...

PostPosted: Wed May 15, 2013 6:05 pm
by chaznet
http://www.newsbin.com/download.php?reg ... ion=6.50B7

Not sure why, but it shows the file itself as being in the Recycle Bin: c:\$Recycle.Bin\S-1-5-21-1823216865-2451182598-2167442625-1001\$R0G7HWC.exe