Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Full Version: "taxes.exe"..?
Loxy
Hello, and thanks for looking on this post. Today I got in my email a file called "Work and taxes.rar" Inside the rar is a exe files "Taxes.exe" This can't be a good thing but I am curious to know what exactly this file is and does.. So I am asking for a basic overview of this file from the pros at this sort of thing. SO anyone willing to take a gander at this file, please msg me and let me know. Thanks again. wink.gif
IcedOut3E
Attach it in a post here: http://www.governmentsecurity.org/forum/in...hp?showforum=80

Thats a new forum to evaluate trojan files/etc..
kbnet
As soon as you post it I will analyse it.

Or you can send it to

fora2k5 %at% gmail dot com

which would be better. I will post the details once its been analysed.
kbnet
You not got an AV mate? Its only - Email-Worm.Win32.Bagle.cf (according to KAV)

Can u please scan the files with up2date identities before asking for analysis.

Cheers.
h40534
if u don't have an av u can do online scan at hxxp://www.virustotal.com. They test ur file with many antivirus software.
Spyd3r
That's funny...I got two emails of the same thing, but the supposed 'sender' was my real name. My first name happens to be a tad unique in the spelling. Has anyone else noticed this?
Loxy
kbnet.. thanks. I actually do have AV software. Obviously it's not as good as I thought. (Symantec Antivirus Corporate Edition 10.x) It has never missed something I scanned until this exe. I guess I will switch to KAV or something. thanks again. ; )
ssss
QUOTE(Spyd3r @ Aug 12 2005, 04:35 PM)
That's funny...I got two emails of the same thing, but the supposed 'sender' was my real name.  My first name happens to be a tad unique in the spelling.  Has anyone else noticed this?
*


Intrestingly I too got the same mail in same pattern . KAV detects it as mail worm
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.