PDA

View Full Version : Suspicious filename


trock
August 1st, 2005, 01:50 PM
I did a normal scan with tds-3 just for kicks, since one of my other programs was quiting on me. Not sure if there is a relation, but tds came up with this:

Suspicious filename Dual extensions

The information I got was this:
File: dbg_x86_6.5.3.7.exe
Product name: Microsoft Windows Operating System
Version: 6.00.2600.0000
Company name: Microsoft Corporation
File Description: Win32 Cabinet Self-Extractor
Internal Name: wextract
Original Filename: WEXTRACT.EXE

Any ideas what this is all about?

Detox
August 1st, 2005, 01:57 PM
The filename is flagged as suspicious because there is more than one . in it.

not suspicious = filename.exe
suspicious = filename.12.32.exe

Usually flags saved files on my system such as game patches with incremental numbering such as version 1.23.

trock
August 1st, 2005, 02:13 PM
How can I tell if this is safe? What action should be taken?

Jooske
August 1st, 2005, 02:54 PM
Hi Trock!
Do you know the file (look in the location on your system, file properties, date when it came on your system) and you can have an extra check for instance at the jotti's or kaspersky online file scanners.
By the description thus far it doesn't sound suspicious in no way, unless your other software was looking at it too.