Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old March 3rd, 2002, 04:50 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default ebu50c4.exe

maybe im just paranoid but this program tried to access the net twice now.. i cant find it on my harddisk at all with search.. so anyone heard of it?
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #2  
Old March 3rd, 2002, 04:56 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: ebu50c4.exe

It is not on my machine. (w2k) It has the look of a temp file. Do you have a path for this file? What did you use to detect this connection? Maybe try a firewall that gives you the full path of the application like Kerio Personal Firewall.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #3  
Old March 3rd, 2002, 06:39 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

I use ZA free edition... and I remember it being in Windows/temp the first time, but I could not find it there. This time there seems to be no indication (maybe I forgot where I looked last time *)
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #4  
Old March 3rd, 2002, 06:39 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

Oh and I use Win98se
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #5  
Old March 3rd, 2002, 07:13 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: ebu50c4.exe

if it is a temp folder, delete it. (unless you have installed something since your last reboot in which case reboot then delete it.)
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #6  
Old March 3rd, 2002, 09:18 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

thats the confusing part.. the first time i emptied my temp folder totally... even though i could not find it in there, not even as a hidden file. This time I just don't know... but it hasn't been causing any problems and I scanned with Trojanchecker 5 so now i will do some more extensive Virus checking since I found nothing.. hopefully it was just some stupid quirk or somethin'...
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #7  
Old March 4th, 2002, 04:30 AM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,383
Default Re: ebu50c4.exe

Hi detox,

grab a trial copy from TDS-3 from our downloads page:

http://www.wilders.org/downloads.htm, grab the latest radius file from the downloads page on the Diamondcs website

http://www.diamondcs.com.au and perform a deep/total system scan, all files included.

Keep us posted!

regards.

paul
__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #8  
Old March 4th, 2002, 08:54 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

thanks m8! that TDS-3 is a rather impressive program, at least it seems that way to me.. but I looked all over the DiamondCS site and couldn't find anything about Radius files... I scanned with the TDS-3 anyway and came up clean, and when i shut it down ZA asked if "Radius update" could access the internet so I said yes.. ?? Feeling kinda dumb hehe
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #9  
Old March 4th, 2002, 09:40 PM
FanJ
 
Posts: n/a
Default Re: ebu50c4.exe

Quote:
thanks m8! that TDS-3 is a rather impressive program, at least it seems that way to me.. but I looked all over the DiamondCS site and couldn't find anything about Radius files...

Hi Detox,

Click on that link that Paul gave you.
Click on: TDS v3.2.0 now available!
Click on download (at the left site)
Scroll down, until you see:
Latest TDS-3 Radius Database - updated daily
Beneath that you see the link.

HTH
  #10  
Old March 4th, 2002, 09:48 PM
FanJ
 
Posts: n/a
Default Re: ebu50c4.exe

Quote:
and when i shut it down ZA asked if "Radius update" could access the internet so I said yes.. ??

It could be that your copy of TDS-3 is set up to automatically check for updates.
In the TDS-3 window:
Click: Configuration.
Go to the Options Tab.
Under Misc Options: see whether the following box is check-marked:
Automatic Database Updates

  #11  
Old March 4th, 2002, 10:52 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

hmm yeah automatic database uptdates is checked already.. but it didnt tell me that it did update or anything like that! I'll check out the link again also.
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #12  
Old March 4th, 2002, 10:57 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

Hmm got it I hope that it was the right thing to do do replace the file with the same name in the TDS-3 directory... It sounds like the logical thing to do. Now off to scan again...
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #13  
Old March 5th, 2002, 01:45 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

Well I replaced the radius file like I said in my last post and ran another full test last night, everything came up clean so I guess it was just some uirky program... It had asked for server rights too though... Ahh well anyway thanks a lot for the suggestion of trying TDS-3 I really like it so far! With this have I no need for Trojancheck 5? I figure its a good idea to use both but if the TDS-3 does all that Trojan does I guess there'd be no use!
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
  #14  
Old March 5th, 2002, 03:28 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,383
Default Re: ebu50c4.exe

Hi Detox,

Glad to know your system is clean *.

Quote:
With this have I no need for Trojancheck 5? I figure its a good idea to use both but if the TDS-3 does all that Trojan does I guess there'd be no use!

One can use both. TC is in principal a program to check all sorts of entries where a trojan(server) can be found; it's not a trojan scanner - that's an (outdated) extra feature. Although TDS will cover your system well, provided you update the radius very frequent, there's no harm in having TC as an on demand extra.

regards.

paul *




__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #15  
Old March 5th, 2002, 09:32 PM
Detox's Avatar
Detox Detox is offline
Global Moderator
 
Join Date: Feb 2002
Location: Texas, USA
Posts: 8,508
Default Re: ebu50c4.exe

Thanks very much! I will hold on to both for now!
__________________
"The price of freedom is eternal vigilance."
- Thomas Jefferson
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 08:07 AM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums