PC Review Forums Newsgroups Hardware Anti-Virus Anyone recognize these files found in Winnt directory?

Reply

Anyone recognize these files found in Winnt directory?

 
Thread Tools Rate Thread
Old 23-03-2006, 01:01 AM   #1
scan@scan.org
Guest
 
Posts: n/a
Default Anyone recognize these files found in Winnt directory?


Loop.exe
Meta4.exe
Mota113.exe

Scans with Jotti.org are negative as with Avast, Ad-Aware, Spybot and
Windows Defender. However, Filealyzer indicates packers as does
Jotti.org.
Jotti didn't find anything but said proceed with caution for all three.



********************************************************************
FileAlyzer © 2003 Patrick M. Kolla. All Rights Reserved.
********************************************************************


File: C:\WINNT\LOOP.exe
Date: 3/22/2006 7:48:49 PM

Packers:

PE Pack
Neolyte
AsProtect
Extreme Protector



***** General ******************************************************
Location: E:\WINNT\
Size: 665088
Version:
CRC-32: E950AB78
MD5: 5AADD8548B8A82374C4AAD8C7F1A3F6A
Read only: No
Hidden: No
System file: No
Directory: No
Archive: Yes
Symbolic link: No
Time stamp: Wednesday, September 24, 2003 10:29:14 AM
Creation: Monday, July 11, 2005 9:05:22 PM
Last write: Wednesday, September 24, 2003 10:29:14 AM


***** Version ******************************************************


  Reply With Quote
Old 23-03-2006, 01:58 AM   #2
Adam Piggott
Guest
 
Posts: n/a
Default Re: Anyone recognize these files found in Winnt directory?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

scan@scan.org wrote:
> Loop.exe
> Meta4.exe
> Mota113.exe
>
> Scans with Jotti.org are negative as with Avast, Ad-Aware, Spybot and
> Windows Defender. However, Filealyzer indicates packers as does
> Jotti.org.
> Jotti didn't find anything but said proceed with caution for all three.


Try submitting them to virustotal.com, IIRC it scans against a wider range
of anti-virus engines. If you still don't get any luck zip them up and
email them to me if you fancy, and when I have a spare moment I'll give
them a whirl in a virtual machine.

Adam Piggott, Proprietor, Proactive Services (Computing).
http://www.proactiveservices.co.uk/

Please replace dot invalid with dot uk to email me.
Apply personally for PGP public key.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)

iD8DBQFEIgC47uRVdtPsXDkRAjHMAJ0TLK8bLi9KPU336CAQ9J7lWWTDLACfXVBP
yCGT6+eA5ZQ5cQeDA8tWiMw=
=bhwy
-----END PGP SIGNATURE-----
  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off