Log in

View Full Version : winzix fun??


evaluator
March 20th, 2009, 15:41
found Winzix shit, it's installer btw is signed.
& goes to download some other EXE, which sooo looks bad..
or this is protection??

pass: winzix

Kayaker
March 20th, 2009, 16:30
You do muck around in the cesspools don't you?

Do NOT trust WinZix and the .zix file format

http://garbledzombie.wordpress.com/2007/11/18/do-not-trust-winzix-and-the-zix-file-format/

Have you looked at that UnZixWin yet?

http://www.kennethsorling.se/software/unzixwin.htm

evaluator
March 21st, 2009, 02:04
ya, i already look @ that things..
btw, i manually recovered zlib-ed files from "archive".. UnZixWin is terribl VB6 prog, failed for install..
IF this ZIX format is too wide used, it is very simple to make unpacker under delphi interface

but subject is that dumn program "minime.exe", it sucks for run on my plain system. try it on you VMs.
is it malware? or some VM-protection?

Kayaker
March 21st, 2009, 04:14
Crazy obfuscation. Let it run and you get the message:

Bad Elmo: You must install this software as part of the parent program. Press Ok to exit.


Bad Elmo:

http://www.bitdefender.com/VIRUS-226716-en--Trojan.Downloader.Swizzor.EM.html

http://www.bitdefender.de/VIRUS-196844-de--trojan.lopad.k.html


Not much joy in there, old IE-target grunge.

evaluator
March 21st, 2009, 14:27
good! at least you some message found.
probably it seeks commandline from WINZIX installer..

would you try also dld&run WINZIX installer!? *8D

jE!ZlibON released!!!!!!!!!!!1 WINZIX unpacker.. promotion company need..