MobaXterm created `xwin_mobax.exe` or it is a virus?

Viewed 2256

Using Personal Edition v20.2 of MobaXterm at Windows 10...

No problem to remove a strange file like C:\Users\USERNAME\Documents\MobaXterm\slash\bin\xwin_mobax.exe ?

PS: this page say that xwin_mobax.exe is a virus, and windows asking about pemission (I cancel).

2 Answers

The page link that you mentioned in your post describes about checking running processes associated with MobaXterm program and if you find those suspicious then it can be dangerous but they are not categorizing as threat since it is tool for SSH and as you know for that it reads keystrokes and mouse inputs.

So simple answer is NOT currently but if you monitor some unusual behavior by its process then it can be.

Did you check this?

1 Antivirus labeled it as Trojan.Heur

The most significant indicator is an Anti-VM trick

(You can also check here and here)


Conclusions:

Related