Undetected Sample

Here is a sample of what it seems to be an undetectable keylogger or trojan.

I upload it to here: http://www.slingfile.com/file/aUpReucl1V

Found it fixing a friends computer he is certain after using it his pc started sending information and storage information. Please reply with the results got me worried since after scaning it nothing was detected

Find more posts tagged with

Comments

rootkit

Thank you for reporting this.

I've sent your request to our lab. I'll keep you up to date.

Have a nice day.

rootkit

Hello

Detection was added were needed.

Thank you for the samples.

Have a great day!

preguntonontrack

So what it was?

rootkit

Hello

My colleagues from the labs are still analyzing the archive, it looks a little suspicious.

We will see what can be made.

Take care.

preguntonontrack

Still waiting for a detailed response its been almost 2 weeks for something that might be stealing info or messing someones pcs.

Hello

My colleagues from the labs are still analyzing the archive, it looks a little suspicious.

We will see what can be made.

Take care.

rootkit

Hello

We have reviewed that archive one more time and nothing malicious was discovered.

If you think your PC is still infected, we need a bit more information as follows:

. A BDSYS log;

[how to GENERATE A BDSYS LOG]

. Save and extract the BDSYS tool to a location of your choice:

http://www.bitdefender.com/files/Knowledge.../BDSysLog_i.exe

. Make sure you close all active applications and then run "BDSysLog_i.exe"; If you receive a firewall

alert,select to Allow the application to connect;

. Click the "Create log" button to start generating the

log; A progress bar is indicating that the tool is creating the report;

. When the small window appears with the message "Log

saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;

. Upload that file on

http://www.sendspace.com

http://www.mediafire.com

and send me a PM with the download link.

If you were already asked to generate the log file, disregard the message above and just post the ticket ID.

IMPORTANT:

.During this process the Real Time Protection in Bitdefender must be temporarily disabled;

.If you receive a Bitdefender Firewall alert to inform you that BDSysLog_i.exe tries to connect to the internet,then you need to select Allow;

[how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2012]

In order to disable the antivirus protection, please open Bitdefender and click the "Settings" button in the upper side part of the interface"; In the new window go to "Antivirus" > "Shield" tab and click on "ON" under On-access scanning. Select the time interval that suites your troubleshooting needs and click "OK". The On-access scanning should be enabled back after finishing the troubleshooting procedure.

[how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2013]

We will get back to you as soon as the analysis is complete.

Have a nice day.

preguntonontrack

The file was not opened in my pc, if its clean i trust is clean. I have another sample i got a from a site ill post it in a new topic.

rootkit

Hello

Thank you for the feedback, we will continue the conversation in the other topic.

Have a great day!