Plz Help For File Why ???

[AHRIMANSEFID]

Hello
I have a big problem.
This file to one of the programs is the satellite.
Avast it as I wanted to ID virus help if possible.
Files has virus or not to run if no solution without warning Avast program to specify.

Code: [Select]

http://rapidshare.com/files/323592867/Why.rar.html

MD5: 55F6A8B9419B6DB67DA8A3DC4F28BB03


[DavidR]

You don't say what the malware name of the detection was ?

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

[DavidR]

This is one reason why rapidshare is a pain, it tries to get you to buy a premium account. You never know if this is server load or them just trying it on, thanks but no thanks.

[AHRIMANSEFID]

Code: [Select]

http://www.virustotal.com/analisis/ad7d23e05f5a30468e0b3547b9ade4b18f6a46cb2698321d094b4a2f64ac923e-1257639937

http://www.virustotal.com/analisis/ad7d23e05f5a30468e0b3547b9ade4b18f6a46cb2698321d094b4a2f64ac923e-1261341484


[DavidR]

Well this one, MINI-SKYNET-SAT4U.EXE, although has the greatest number of detections most of them are either generic or heuristic, which are more prone to false detection, so you should send that to avast for analysis as a possible false positive.

Not sure what this is weird file name, 8906f0940018792870191ae0f967940074455aad.EXE and isn't detected in VT by avast, the 3 detections are I believe generic also.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

[AHRIMANSEFID]

Hi.
Me Send Mail But No't Check Or Send Me Mail Why.?

[DavidR]

You will not normally be contacted unless they require more information.

Periodically scan the file from inside Chest, after VPS updates, when it is no longer detected you can restore the file/ to their original location/s.

[AHRIMANSEFID]

Thanks from a very popular and excellent anti-virus myself.
Currently has many problems by cooperation as well as you and your efforts I am grateful.
Again, thank you for your efforts.

[DavidR]

You're welcome.