|
Posted by William on December 27, 2006, 1:16 am
If you were Registered and logged in, you could reply and use other advanced thread options
> Hello David
>
> No response to the zip file I attached to an email and sent to
> Virustotal but, I just discovered the "send" facility on the Virustotal
> site homepage ! ...so I 'sent' the WinIo.dll file via that, and watched
> the multitude of malware scanners there give it a clean bill of health -
> except Ewido 4.0 which claimed it contained trojan.agent.f
>
> Mine is a very old copy of "Hot CPU Tester," and haven't used it for
> ages. i.e. I used it quite a long time ago testing a cpu for fpu errors.
> If you'd like that WinIo.dll file, or the *.zip file containing the
> program, I could email it to you or, (suspecting it's a false positive),
> I'm otherwise I'm happy to delete the program.
>
> regards, Richard
>
>
>>
>> | hello, I know ....I know ....
>> |
>> | ....different software houses label'em with different names !
>> |
>> | ANYWAY, ...I left Grisoft anti-malware ...or is it anti-spyware /
>> that used
>> | to be Ewido, ( I seem to have upgraded it for the remainder of my
>> 12months
>> | license, and it's no longer called Ewido ), do a complete system
>> sweep (2
>> | hd's / 9 drives )
>> |
>> | ...and it claims to have found "trojan.agent.f" in WinIo.dll on my
>> drive
>> | I:_PROGS\utilities\hotcputesterpro342
>> |
>> | ...false positive ? ...am about to submit it to Virus Total ?
>> ..anything
>> | known ?
>> |
>> | regards, Richard
>>
>> Richard, Please post that Virus Total report.
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> http://www.ik-cs.com/got-a-virus.htm
>>
>>
>
According to http://www.winsite.com/bin/Info?500000002771, this file is
supposed to enable Visual Basic to do 8- and 16-bit input and output
hardware. Personally, if it were me, and I suspected it, I'd try
renaming the file to something like WinIO.suspect so that it can't be
called the OS (or if you suspect it might get called with the same name,
than completely change the name). If it turns out later that you need
it, than you can just rename it again and be on your way. Good luck.
| 
XML site map