Virus alert - same time every day - v.exe - must be traccar.

TLG IT 6 years ago

Hello, please see the below image link.
https://www.screencast.com/t/7Y2jTnaK9ii
ever since installing traccar on a server my AV is alerting on this action.
What is this and what is it for????
very suspect. used the binary installer for 4.0. please explain what this automated task is doing.
there is nothing else but traccar installed on this server.

mdtaylorlrim6 years ago

That has nothing to do with Traccar. From the looks of the file path it was a file downloaded as a result of browsing the internet with IE5. It is in your temporary internet files.

Clear your cache.

TLG IT 6 years ago

um.. no... I've never even launched the included IE on this server OS. downloaded the installer on my admin machine and copied it over SMB..
This literally has nothing except our AV, windows updates, Java 8 and.. Traccar 4.0 here some more info.. all started the day after traccar was installed...

https://www.screencast.com/t/Cr6ENbK1rJ
i'll be watching via procmon/exp at the next repeated interval..

Anton Tananaev6 years ago

The issue is clearly with your internet browsing cache. The fact that it started day after you installed Traccar is just a coincidence.

TLG IT 6 years ago

I discovered it certainly wasn't anything to do with the internet like I suspected.
However, it wasn't anything to do with Traccar..
After monitoring with ProcMon we determined that WMI was executing netbios/netstat and dropping this V.exe which appears to be a dos-based file manager. This was all done by our internal ticketing system (Spiceworks) which apparently has been setup to auto scan and gather inventory data from all devices. Thank you for the support guys. This is another reason Traccar is so good. Fantastic software/Community.