Author Topic: Is this installer malicious - unknown_file_$INSTDIR/kidzui.ex-?  (Read 1246 times)

0 Members and 2 Guests are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34054
  • malware fighter
See: http://zulu.zscaler.com/submission/show/ed19772e889458d04d4840143fb77e0a-1341860915
Two detections: https://www.virustotal.com/url/9bf5de86e1cf88c57dc5302c9ee2dde4b91bab40e9b3bca1e7789b81edc8b96a/analysis/
FP for PUA packed software? -> unknown_file_$INSTDIR alert
Given clean here: http://vscan.urlvoid.com/analysis/e915d7466aa925f41bb9d9810b78883d/a2lkenVpLWluc3RhbGxlci1leGU=/
The filename KIDZUI_INSTALLER.EXE is used by objects that are classified as safe. It has not yet been seen to be associated with malicious software.
Why the URL has been given at VirusWatch?  IP with various trojans now all closed?

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!