PDA

View Full Version : ESS Keeps Detecting WIn32/Stakit in Http Filter


kurchatovium
August 23rd, 2008, 11:42 PM
This is the second time ESS has detected a file (always i1.exe and about 41kb) from the HTTP filter and says its a variant of Win32/Statik. Everytime I scan ESS finds nothing on the computer. Is this a false positive? The file looks suspicious so I delete from quaritine. Just not sure what going on.

agoretsky
August 24th, 2008, 12:20 AM
Hello,

Please send the file in a .ZIP or .RAR archive file protected with a password of "infected" to samples@eset.sk (samples@eset.sk) with a link to this message thread. The virus lab will examine the file to determine why it is being classified as a Win32/Statik trojan.

Regards,

Aryeh Goretsky

The Hammer
August 24th, 2008, 12:26 AM
-{ Quote: "This is the second time ESS has detected a file (always i1.exe and about 41kb) from the HTTP filter and says its a variant of Win32/Statik. Everytime I scan ESS finds nothing on the computer. Is this a false positive? The file looks suspicious so I delete from quaritine. Just not sure what going on." }-You could submit the file to Eset from quarantine. But it looks like the HTTP scanner did its job thats why your on demand scan finds nothing as the file has been dealt with.

kurchatovium
August 24th, 2008, 12:29 AM
I submitted it to Eset from the quaratine area by right clicking on it and choosing submit for analysis. The file never actually gets on to my computer perse cause I did a search for the file its not on the hard drive. I guess the quaratine area is seperate. Thanks for your time. ;D