Penetration Testing mailing list archives

Re: [PEN-TEST] Suspect .EXE Trojan


From: Bob Dog <bobdog () drunk co nz>
Date: Fri, 15 Dec 2000 14:28:59 -0800

I would like to respond to this with my own question.
Is there an orginization that I could send a suspected
file to that could tell me whether or not it was
malicious? Will AV vendors give you such information?


--- "Ruso, Anthony" <aruso () POSITRON QC CA>
wrote:
Hi,

I have a suspect executable that I think may be a Trojan. A search on the
.exe doesn't return any result with any virus vendor. Are there any tools
that would allow me to execute the file in isolation and actually see what's
going on. The file was already executed on two workstations and it killed
Outlook in both cases. I know I can use tripwire and similar products to see
what files it makes changes to but I don't want to risk killing outlook
again.

Thanks

Anthony Ruso

_____________________________________________________________
Visit these sites today
Blink 182 Fan Site - www.blink182.co.nz
NZ Skateboarding - www.nzskate.com


Current thread: