Virus or FP

Viruses and worms
1

Hi :slight_smile:

I sent exe file to VT and get these results:http://www.virustotal.com/analisis/3431f26eb643faaef01be24bfe4506ee3d1f8ba7765c168c921feb319d3f0cd5-1263679810

Could be this possible undetected malware?

http://camas.comodo.com/cgi-bin/submit?file=3431f26eb643faaef01be24bfe4506ee3d1f8ba7765c168c921feb319d3f0cd5

Have a nice day. :slight_smile:

2

It is highly suspicious as the camas.comodo analysis indicates, copies itself to other locations (so you should search for those) and then deletes itself. So I suggest you send the sample to avast for analysis.

What drew your attention to this file ?

3

I will send this file to Avast lab. Anyway thank you for your help but I didn,t install this file. :wink:

Have a nice day. :slight_smile:

4

here is an analyze tool i wanted to test, can you upload and post the result if you have the time?
http://norman.com/security_center/security_tools/submit_file/en-us

5

[b]dropper.exe : Not detected by Sandbox (Signature: NO_VIRUS)

[ DetectionInfo ]
* Filename: C:\analyzer\scan\dropper.exe.
* Sandbox name: NO_MALWARE
* Signature name: NO_VIRUS.
* Compressed: NO.
* TLS hooks: NO.
* Executable type: Application.
* Executable file structure: OK.
* Filetype: PE_I386.

[ General information ]
* File length: 35840 bytes.
* MD5 hash: 838c7cdc3a53e460f6dc4ac6b81368cf.
* SHA1 hash: 6137a03c1920bb03e9d139846f4457e13b72c9fd.[/b]

6

just curious how it worked, thanks… :wink: