Security Basics mailing list archives

Database of strange files


From: "Di Fresco Marco" <superdif () infinito it>
Date: Tue, 5 Aug 2003 01:31:44 -0700

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey,
I assume that this is a F.A.Q kind of question, but I am not finding
any answer (at least in the first 2 results' pages of Google).

Do you know any good on-line (and better if I can download off-line
for reference) database for determine if some (strange) file is
legitimate or is a virus/trojan/cracked/whatever?

For example: I am currently dealing with "olfsnt40.exe" that it has
been showing up for 2/3 days in my "Windows Task Manager"; from the
name it sound like that it has to do with Office (it is just "the
name sound like" assumption) and just 2/3 days ago I played with
Office 2000 and the Beta of the new version and so I am just assuming
that is related to Office. But I am not sure about this assumption
and it maybe be a virus/trojan/whatever and I am just leaving it
working (even if, in case it is a trojan, I do not know how much it
can work with two personal firewall).

That is just a (real) example, but I get doubts about files very
often and it would be very usefull if I have some sort of database to
use to check the (supposed) purpose of the files.

Than in advance.



Di Fresco Marco
ICQ #51985192


|---------------------------------------------------------------------
|--| 
| Spock (Court Martial - TOS): If I let go a hammer on a planet
| having        | a positive gravity, I need not see it fall to know that it
| has, in       | fact fallen.                                                                          |
|---------------------------------------------------------------------
|--|

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQA/AwUBPy9o8GGMuE6+l29WEQImAwCfTWS+5UupY6Bd0FZ1w6SZ/N3chIEAoIq7
67meoSHRHV942uCIOdoCtLMD
=xRwi
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: