Re: strange software > winsupdater.exe
From: Justin (justin_at_jfoobar.com)
Date: 03/16/05
- Previous message: Mike Barushok: "Re: strange software > winsupdater.exe"
- In reply to: Nick FitzGerald: "Re: strange software > winsupdater.exe"
- Next in thread: Jeremy Anderson: "Re: strange software > winsupdater.exe"
- Reply: Jeremy Anderson: "Re: strange software > winsupdater.exe"
- Reply: David Gillett: "Pubstro rash"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: nick@virus-l.demon.co.uk Date: Wed, 16 Mar 2005 13:57:38 -0500
On Wed, 2005-03-16 at 12:53 +1300, Nick FitzGerald wrote:
> Filenames are all but totally useless for diagnosing malware, spyware
> _AND_ the normal operation of a system.
>
Amen. Trying to disguise itself as something related to Windows Update
is a fairly common tactic for Trojans.
> If you suspect the file may be some (new) undesirable thing, send
> copies to your preferred antivirus (and possibly other "security")
> product developers asking them for an analysis and to add detection and
> removal if it turns out that it really is "undesirable" by their
> standard.
Start with Kaspersky. They have the best track record of detecting
Trojans of any of the scanners I work with. Go to their website and
upload the file to their online virus scanner:
http://www.kaspersky.com/scanforvirus
Better yet, upload it at VirusTotal.com and it will scan it against
several updated engines.
Regards,
Justin
- Previous message: Mike Barushok: "Re: strange software > winsupdater.exe"
- In reply to: Nick FitzGerald: "Re: strange software > winsupdater.exe"
- Next in thread: Jeremy Anderson: "Re: strange software > winsupdater.exe"
- Reply: Jeremy Anderson: "Re: strange software > winsupdater.exe"
- Reply: David Gillett: "Pubstro rash"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
