Author Topic: Do you use this link to look up files?  (Read 1603 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Do you use this link to look up files?
« on: May 27, 2009, 10:43:40 PM »
Hi malware fighters,

Another link in the malware fight. I looked if mcieplg-dll was a legit file here:
 http://www.what-is-exe.com/filenames/mcieplg-dll.html

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89116
  • No support PMs thanks
Re: Do you use this link to look up files?
« Reply #1 on: May 27, 2009, 11:24:35 PM »
I'm not entirely sure just how useful this is as it is so easy to call a file anything_you_like.exe after a known system or legit file. So this could give a false sense of security.

Even the site mentions similar issues with misspelt common names.

Quote
Be sure to always double check your spelling if you are concerned about spyware, as often spyware will use a very similar spelling of system processes or other common tasks. mcieplg.dll

It doesn't place much emphasis on the same name but in a different location.

So I think analysis by scanning (virustotal, Anubis, etc.), is the only realistic option as file names are just too inconclusive.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

CharleyO

  • Guest
Re: Do you use this link to look up files?
« Reply #2 on: May 28, 2009, 09:56:32 AM »
***

In the past, I have used that site a few times, Polonus.   :)


EDIT :

Home page link - http://www.what-is-exe.com/

***
« Last Edit: May 28, 2009, 09:59:56 AM by CharleyO »