Author Topic: Is this file is dangerous ?  (Read 3608 times)

0 Members and 1 Guest are viewing this topic.

Bros

  • Guest
Is this file is dangerous ?
« on: December 26, 2009, 08:54:02 PM »
Hello,

My friend sent me a file whice i runned, avast didnt say anything about this file but im scared that it did something.

This is the file : hxxp://www.2shared.com/file/10258778/99198c0f/MultiInjector.html

Please let me know what this file do and if you can, please explain me how can i know if file is bad or not even if its not a virus.

« Last Edit: December 26, 2009, 09:08:42 PM by Bros »

news

  • Guest
Re: Is this file is dangerous ?
« Reply #1 on: December 26, 2009, 09:00:38 PM »
Bros..would you please change the http in your link to hxxp in the link you've provided. In the event that infection is present, it would prevent anyone else from getting the infection as well. Hopefully, someone will be along to help you with your problem. Thanks.


Bros

  • Guest
Re: Is this file is dangerous ?
« Reply #2 on: December 26, 2009, 09:08:58 PM »
Ok i changed.

Sorry.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37700
Re: Is this file is dangerous ?
« Reply #3 on: December 26, 2009, 09:13:45 PM »
Upload the file to VirusTotal http://www.virustotal.com/ or Jotti http://virusscan.jotti.org/en
Then copy the URL in the adressbar when the result is up, and post it here
« Last Edit: December 26, 2009, 09:17:56 PM by Pondus »


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34065
  • malware fighter
Re: Is this file is dangerous ?
« Reply #5 on: December 27, 2009, 02:06:06 AM »
Hi Bros,

It is a website defacement tool. Apparently it is not flagged by virustotal. Check with this program to see if any traces of active malcode are there. Threat Expert Memory Scanner can be download here: http://www.threatexpert.com/memoryscanner.aspx  (tutorial also there) and post the results in your reply (can also submit the file in question to Threat Expert from inside the scanner).
I think you had a lucky escape, spit in your hands  ;D and be careful with what you share. OK, something reassuring here all files that are uploaded to 2shared.com are being malware scanned, so the chance of getting malware from there is less obvious as not to say remote or it must be malware that goes "under the radar" so to say, and that is why we use Threat Expert Mem Scanner on the file,

polonus

« Last Edit: December 27, 2009, 02:47:17 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!