Zbog problema u radu kurirske službe, rok isporuke je privremeno produžen na 5 do 7 radnih dana.
Aktivno radimo na rešavanju situacije. Hvala na razumevanju!

Newactive.exe

NewActive.exe is a legacy ActiveX plugin installer primarily used for viewing live video feeds from Chinese-manufactured IP cameras and DVR/NVR systems (such as those from XMeye/XMSecurity, Green Backyard, and Besder) through a web browser. Core Function and Usage

Purpose: It installs the necessary .ocx (ActiveX) files required for older versions of Internet Explorer to decode and display RTSP video streams from security cameras.

Compatibility: It generally only functions in Internet Explorer or modern browsers (like Chrome) using an "IE Tab" extension, as modern browsers have phased out ActiveX support for security reasons.

Installation: It typically requires Administrator privileges to run and often triggers Windows Defender warnings due to its lack of a verified digital signature. Security Risks and Red Flags newactive.exe

While often legitimate software for budget camera hardware, newactive.exe is frequently flagged as suspicious or malicious by sandbox analysis tools for the following reasons:

Malware Flags: Security platforms like ANY.RUN have identified versions of this file exhibiting malicious behavior, such as dropping or rewriting executables and downloading additional files from the internet.

Vulnerabilities: Because it relies on ActiveX—a technology known for severe security flaws—using this plugin can expose your computer to remote code execution risks. NewActive

Origin: Files are often hosted on unsecured HTTP sites (e.g., xmsecu.com or golbong.com), making them susceptible to "man-in-the-middle" attacks where a malicious version could be swapped for the real one. Recommendations

Avoid Installation: If possible, use official mobile apps (like ICSee or XMeye) or dedicated desktop software (like VMS or iSpy) instead of browser-based ActiveX plugins.

Verify the Source: If you must use it, ensure you are downloading it from a reputable manufacturer's site and scan it with VirusTotal before running. Detection ratio 0/60: Very likely a rare legitimate file

Use a Dedicated Environment: If it is required for your hardware, run it within a Virtual Machine (VM) or on a secondary computer that does not contain sensitive personal data to mitigate risk. Add ICSEE Camera to HA (rtsp) - Home Assistant Community

I can guide you through creating a basic piece of code for a new executable file named "newactive.exe". For this example, I'll use Python with the PyInstaller library to create a simple executable that displays a message box. This example assumes you're on a Windows system or have access to a Windows environment for testing.

Step 4: Upload to VirusTotal

Without deleting anything yet, upload the file to VirusTotal (virustotal.com). This platform scans the file with over 60 antivirus engines.

Method 3: System Restore

If the infection has caused system instability, use a restore point from a date before the file first appeared.

Method 2: Manual Cleanup (Advanced Users)

  1. End the newactive.exe process in Task Manager.
  2. Delete the file from its location (e.g., %AppData%\Roaming\newactive.exe).
  3. Open Registry Editor (regedit). Search for newactive.exe and delete any entry that references it (especially under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run).
  4. Check Task Scheduler (taskschd.msc) for any triggers set to run newactive.exe at login or system startup.