Recently, I downloaded a program with WinMX from a person’s share drive (Yeah, I know, don’t say it) :-X
The file was labled WinMX_AntiKick/Ban.exe. It was supposed to prevent banning from a Chat room. Like an idiot, I ran the file. The screen flickered several times like something was being accessed, then the system spontaniously shut down. On reboot, the system started up normally, then immediatly shut down. It did not even leave time to activate Taskmanager or any other function.
Since I use Windows XP Home, booted in Safe Mode and restored the system to the previous configuration, and the problem went away.
I am using Norton Antivirus, latest update, which did not catch it. I plan to re-install Avast from my old computer where it was originally installed.
Is there anywhere I can send this file for analysis?
First check with JOTTI to see if it already is detected or not. And scan it with Avast.
If Avast doesn’t detect it and others do, send the file in a password protected zip to virus@avast.com en mention in the mail why you think it should be added to the vps and don’t forget to mention the pw ofcourse.
Hi Grizebar,
What did Jotti scanner report on the file?
Cheers
Jlo
Hi Grizebar,
What did Jotti scanner report on the file?
Cheers
Jlo
I didn’t use Joti. In fact, I don’t know what it is, of course I haven’t re-installed Avast Home until today. 
When I ran the Avast! scanner, it did pick up on the WinMX_AntiKICK/BAN.exe and tagged it as the Win32Reboot virus. I moved it to the Chest, as suggested. I didn’t send it as it is apprently in the new virus sig database.
I tried to send the file to Jotti, but it was blocked from transfer by either my broadband firewall or some other program, probably Avast.
Since this is in the database, I won’t bother sending it.
to stop shutdown
open the run box type shutdown -a
that will stop the shutdown
-max