Loxy
Aug 12 2005, 01:19 AM
Hello, and thanks for looking on this post. Today I got in my email a file called "Work and taxes.rar" Inside the rar is a exe files "Taxes.exe" This can't be a good thing but I am curious to know what exactly this file is and does.. So I am asking for a basic overview of this file from the pros at this sort of thing. SO anyone willing to take a gander at this file, please msg me and let me know. Thanks again.
IcedOut3E
Aug 12 2005, 01:30 AM
Attach it in a post here:
http://www.governmentsecurity.org/forum/in...hp?showforum=80Thats a new forum to evaluate trojan files/etc..
kbnet
Aug 12 2005, 05:44 AM
As soon as you post it I will analyse it.
Or you can send it to
fora2k5 %at% gmail dot com
which would be better. I will post the details once its been analysed.
kbnet
Aug 12 2005, 09:34 AM
You not got an AV mate? Its only - Email-Worm.Win32.Bagle.cf (according to KAV)
Can u please scan the files with up2date identities before asking for analysis.
Cheers.
h40534
Aug 12 2005, 04:18 PM
if u don't have an av u can do online scan at hxxp://www.virustotal.com. They test ur file with many antivirus software.
Spyd3r
Aug 12 2005, 04:35 PM
That's funny...I got two emails of the same thing, but the supposed 'sender' was my real name. My first name happens to be a tad unique in the spelling. Has anyone else noticed this?
Loxy
Aug 12 2005, 06:52 PM
kbnet.. thanks. I actually do have AV software. Obviously it's not as good as I thought. (Symantec Antivirus Corporate Edition 10.x) It has never missed something I scanned until this exe. I guess I will switch to KAV or something. thanks again. ; )
ssss
Aug 14 2005, 07:22 AM
QUOTE(Spyd3r @ Aug 12 2005, 04:35 PM)
That's funny...I got two emails of the same thing, but the supposed 'sender' was my real name. My first name happens to be a tad unique in the spelling. Has anyone else noticed this?
Intrestingly I too got the same mail in same pattern . KAV detects it as mail worm
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.