Page MenuHomePhabricator

Dropper.Generic Trojan Horse
Closed, InvalidPublic

Description

Author: juliebolliger

Description:
I went to http://en/wikipedia.org/wiki/KellyClarkson;
attempted to open "Because of You" at
http://upload.wikimedia.org/wikipedia/en/7/71/Kelly_Clarskon
_-_Because_Of_You and am now the unwitting host of a virus
which apparently duplicates itself.


Version: unspecified
Severity: major
OS: Windows ME
Platform: PC

Details

Reference
bz6709

Event Timeline

bzimport raised the priority of this task from to Unbreak Now!.Nov 21 2014, 9:15 PM
bzimport set Reference to bz6709.
bzimport added a subscriber: Unknown Object (MLST).

Can you provide details of what program told you you have a
virus? Such warnings are sometimes false positives.

I can find no virus in that file (which is in fact a working ogg file, btw). Try
the following pages, which use a variety of virus scanners to check the file you
upload (use the small box at the top of the page):

http://www.virustotal.com
http://virusscan.jotti.org

The file I scanned can be identified uniquely using the following (this is also
displayed by virustotal):
MD5: f60e194a42877f2ab88a139afe79c16c
SHA1: f3e6f3965d87776d30e177678c6606b8656670e9

It appears that your problems have another source. If you are confident that
they stem from this file on Wikipedia, please povide more details about what
software gives you what message, what problems you are experiencing, since when,
etc. Note that *if* the file is infected, it may have been infected on your
computer. The checksums above give you a way to see if the file on your disk is
identical to the one on wikipedia.

Rescanned with Virustotal. Same file as Duesentrieb's. Now virus files should be
much more updated as three months ago, when you experienced it. No antivirus
found a virus on it.
So, as you didn't provide more info on it, i close as invalid. It probably was a
false positive.

Restricted Application added a subscriber: TerraCodes. · View Herald TranscriptJul 12 2016, 6:43 AM