Windowsnames virus?!?

**CavityCr33p** · 07-20-2005, 05:35 PM

Scan type: Auto-Protect Scan
Event: Threat Found!
Threat: W32.Licum
File: D:\Carputer\windownames.exe
Location: D:\Carputer

Found with Symantec corp 9.0 auto protect

What is this about?

**paran0id** · 07-20-2005, 05:38 PM

Would think it's because it's "spying" on the other programs to get their windownames..
Think it's called Spy++ or something like that..

No worries, it's not a virus.. AV's just think it's similar to one..

Edit: Found a link for Spy++ on MSDN.. Click here

Edit2: Though, it could still be a virus.. You never know do you..
Try deleting the file and download it again.. Re-scan that file and see what your AV tells you..

Cheers
/p

**rickster** · 07-20-2005, 05:39 PM

isn't windowsnames.exe an app David wrote for finding windows names for embedding

not pointing the finger at you David

**veetid** · 07-20-2005, 08:18 PM

it is, but I took it off my server a long time ago... People have been downloading it from other sources that I know nothing about...

david

**CavityCr33p** · 07-20-2005, 08:24 PM

I got it from one of the posters in the Windowsnames app thread.

**aoLhaTer** · 07-20-2005, 11:26 PM

Just use the app included with AutoIt

**CavityCr33p** · 07-21-2005, 09:00 AM

Originally Posted by aoLhaTer

Just use the app included with AutoIt

I understand that, but it still doesnt explain why I am getting a virus alert when using a program distributed on these forums (not saying from David, from the other users redistributing)

**giz@turbocharge** · 07-23-2005, 03:27 AM

Did you download it from me???

**Jahntassa** · 07-23-2005, 08:04 AM

http://securityresponse.symantec.com...w32.licum.html

That's Semantec's datasheet on it. It looks like it's one of those Virii that 'attatches' to files on someone's computer. So if someone was infected, then reuploaded the file, it could've attatched itself. It might've even happened on a hosting server if their antivirus failed.