WinDefend

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I frequently get this Warning in Event Viwer immediately after connecting to
BT Broadband: Event 3004
"Windows Defender Real-Time Protection agent has detected spyware or other
potentially unwanted software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {ECDF5B2E-5D1A-41F7-B7A0-0887FBE0907C}
User: MARTIN\Martin G
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:WINIO;file:C:\WINDOWS\winio.sys
Alert Type: Unknown
Detection Type:
The Microsoft link says:
We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere.
Does anyone know the answer!
 
Gruselle,

Here's a thread from April concerning winios.sys :
http://www.windowsbbs.com/showthread.php?t=53271

Locate the file in C:\WINDOWS, right click it and choose Properties.
Click the Version tab.
Check for information next to Description and Copyright.
Also, check the info under Item name.

It may be a legit file that hasn't been classified by SpyNet; it may be
a malicious file suspected, but not yet detected as a specific malware.

You can try scanning the file here:
http://www.virustotal.com/flash/index_en.html

Unfortunately, that site has been seeing very heavy traffic lately and
you may be asked to submit the file via email. The scan results will be
emailed back to you.

Please us posted on just what this copy of winio.sys *is*.


MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============
 
Thanks MowGreen: I see someone else had same problem.
Did what you said. Found Application Extension "winio.dll" which had
following Properties:
General - Created 18 Nov 2002; Modified 18 Mar 2002; Accessed 26 Sept 2006
Version - 2.0.0.0
Description: WinIo
Copyright: Copyright@1998-2002, Yariv Kaplan
Item Info: Company: http//www.internals.com
This website describes Winio as "This library allows direct I/O port and
physical memory access under Windows 9x/NT/2000 and XP. Version 2.0 provides
faster I/O port access, better memory mapping support and can be used from
non-administrative accounts under Windows NT/2000 and XP."
Looks kosher but is it?

MowGreen said:
Gruselle,

Here's a thread from April concerning winios.sys :
http://www.windowsbbs.com/showthread.php?t=53271

Locate the file in C:\WINDOWS, right click it and choose Properties.
Click the Version tab.
Check for information next to Description and Copyright.
Also, check the info under Item name.

It may be a legit file that hasn't been classified by SpyNet; it may be
a malicious file suspected, but not yet detected as a specific malware.

You can try scanning the file here:
http://www.virustotal.com/flash/index_en.html

Unfortunately, that site has been seeing very heavy traffic lately and
you may be asked to submit the file via email. The scan results will be
emailed back to you.

Please us posted on just what this copy of winio.sys *is*.


MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

I frequently get this Warning in Event Viwer immediately after connecting to
BT Broadband: Event 3004
"Windows Defender Real-Time Protection agent has detected spyware or other
potentially unwanted software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {ECDF5B2E-5D1A-41F7-B7A0-0887FBE0907C}
User: MARTIN\Martin G
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:WINIO;file:C:\WINDOWS\winio.sys
Alert Type: Unknown
Detection Type:
The Microsoft link says:
We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere.
Does anyone know the answer!
Click to expand...
Click to expand...
 
Gruselle,

Still recommend submitting it to VirusTotal. Just to be on the safe side

MG
Thanks MowGreen: I see someone else had same problem.
Did what you said. Found Application Extension "winio.dll" which had
following Properties:
General - Created 18 Nov 2002; Modified 18 Mar 2002; Accessed 26 Sept 2006
Version - 2.0.0.0
Description: WinIo
Copyright: Copyright@1998-2002, Yariv Kaplan
Item Info: Company: http//www.internals.com
This website describes Winio as "This library allows direct I/O port and
physical memory access under Windows 9x/NT/2000 and XP. Version 2.0 provides
faster I/O port access, better memory mapping support and can be used from
non-administrative accounts under Windows NT/2000 and XP."
Looks kosher but is it?

:

Gruselle,

Here's a thread from April concerning winios.sys :
http://www.windowsbbs.com/showthread.php?t=53271

Locate the file in C:\WINDOWS, right click it and choose Properties.
Click the Version tab.
Check for information next to Description and Copyright.
Also, check the info under Item name.

It may be a legit file that hasn't been classified by SpyNet; it may be
a malicious file suspected, but not yet detected as a specific malware.

You can try scanning the file here:
http://www.virustotal.com/flash/index_en.html

Unfortunately, that site has been seeing very heavy traffic lately and
you may be asked to submit the file via email. The scan results will be
emailed back to you.

Please us posted on just what this copy of winio.sys *is*.


MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============


Gruselle wrote:

I frequently get this Warning in Event Viwer immediately after connecting to
BT Broadband: Event 3004
"Windows Defender Real-Time Protection agent has detected spyware or other
potentially unwanted software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {ECDF5B2E-5D1A-41F7-B7A0-0887FBE0907C}
User: MARTIN\Martin G
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:WINIO;file:C:\WINDOWS\winio.sys
Alert Type: Unknown
Detection Type:
The Microsoft link says:
We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere.
Does anyone know the answer!
Click to expand...
Click to expand...
Click to expand...
 
Will do - Thanks again

MowGreen said:
Gruselle,

Still recommend submitting it to VirusTotal. Just to be on the safe side

MG
Thanks MowGreen: I see someone else had same problem.
Did what you said. Found Application Extension "winio.dll" which had
following Properties:
General - Created 18 Nov 2002; Modified 18 Mar 2002; Accessed 26 Sept 2006
Version - 2.0.0.0
Description: WinIo
Copyright: Copyright@1998-2002, Yariv Kaplan
Item Info: Company: http//www.internals.com
This website describes Winio as "This library allows direct I/O port and
physical memory access under Windows 9x/NT/2000 and XP. Version 2.0 provides
faster I/O port access, better memory mapping support and can be used from
non-administrative accounts under Windows NT/2000 and XP."
Looks kosher but is it?

:

Gruselle,

Here's a thread from April concerning winios.sys :
http://www.windowsbbs.com/showthread.php?t=53271

Locate the file in C:\WINDOWS, right click it and choose Properties.
Click the Version tab.
Check for information next to Description and Copyright.
Also, check the info under Item name.

It may be a legit file that hasn't been classified by SpyNet; it may be
a malicious file suspected, but not yet detected as a specific malware.

You can try scanning the file here:
http://www.virustotal.com/flash/index_en.html

Unfortunately, that site has been seeing very heavy traffic lately and
you may be asked to submit the file via email. The scan results will be
emailed back to you.

Please us posted on just what this copy of winio.sys *is*.


MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============


Gruselle wrote:


I frequently get this Warning in Event Viwer immediately after connecting to
BT Broadband: Event 3004
"Windows Defender Real-Time Protection agent has detected spyware or other
potentially unwanted software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {ECDF5B2E-5D1A-41F7-B7A0-0887FBE0907C}
User: MARTIN\Martin G
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:WINIO;file:C:\WINDOWS\winio.sys
Alert Type: Unknown
Detection Type:
The Microsoft link says:
We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere.
Does anyone know the answer!
Click to expand...
Click to expand...
Click to expand...
 
Now checked through TotalVirus - nothing found. Many thanks. How do we get
WinDefender to stop considering it as possible Malware?

MowGreen said:
Gruselle,

Here's a thread from April concerning winios.sys :
http://www.windowsbbs.com/showthread.php?t=53271

Locate the file in C:\WINDOWS, right click it and choose Properties.
Click the Version tab.
Check for information next to Description and Copyright.
Also, check the info under Item name.

It may be a legit file that hasn't been classified by SpyNet; it may be
a malicious file suspected, but not yet detected as a specific malware.

You can try scanning the file here:
http://www.virustotal.com/flash/index_en.html

Unfortunately, that site has been seeing very heavy traffic lately and
you may be asked to submit the file via email. The scan results will be
emailed back to you.

Please us posted on just what this copy of winio.sys *is*.


MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

I frequently get this Warning in Event Viwer immediately after connecting to
BT Broadband: Event 3004
"Windows Defender Real-Time Protection agent has detected spyware or other
potentially unwanted software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {ECDF5B2E-5D1A-41F7-B7A0-0887FBE0907C}
User: MARTIN\Martin G
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:WINIO;file:C:\WINDOWS\winio.sys
Alert Type: Unknown
Detection Type:
The Microsoft link says:
We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere.
Does anyone know the answer!
Click to expand...
Click to expand...
 
Gruselle,

You're mowst welcome. Have you opted in to SpyNet ? When enough data on
the file in question comes in then WD will not detect it as a
questionable item.
Remember, Win Def is still in BETA. Detected objects should be checked
out via Google or another search engine to see if info on it is already
published.
In your situation, the info is not very helpful. That's why I asked you
to submit it to VirusTotal. ;)

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

Now checked through TotalVirus - nothing found. Many thanks. How do we get
WinDefender to stop considering it as possible Malware?

:

Gruselle,

Here's a thread from April concerning winios.sys :
http://www.windowsbbs.com/showthread.php?t=53271

Locate the file in C:\WINDOWS, right click it and choose Properties.
Click the Version tab.
Check for information next to Description and Copyright.
Also, check the info under Item name.

It may be a legit file that hasn't been classified by SpyNet; it may be
a malicious file suspected, but not yet detected as a specific malware.

You can try scanning the file here:
http://www.virustotal.com/flash/index_en.html

Unfortunately, that site has been seeing very heavy traffic lately and
you may be asked to submit the file via email. The scan results will be
emailed back to you.

Please us posted on just what this copy of winio.sys *is*.


MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============


Gruselle wrote:

I frequently get this Warning in Event Viwer immediately after connecting to
BT Broadband: Event 3004
"Windows Defender Real-Time Protection agent has detected spyware or other
potentially unwanted software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {ECDF5B2E-5D1A-41F7-B7A0-0887FBE0907C}
User: MARTIN\Martin G
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:WINIO;file:C:\WINDOWS\winio.sys
Alert Type: Unknown
Detection Type:
The Microsoft link says:
We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere.
Does anyone know the answer!
Click to expand...
Click to expand...
Click to expand...
 
Back
Top