Strange file

Discussion in 'malware problems & news' started by Dale, May 24, 2003.

Thread Status:
Not open for further replies.
  1. Dale

    Dale Guest

    Hi, new here and have a question I have heard others have this popping up on thier desktop for no reason.
    ~.dat 283KB
    The cleaner found nothing, norton found nothing, pest patrol found nothing, opening up the .dat file it looks somewhat like a .jpg or gif would look like, anyone heard of this or a program that could tell me whats it about/for/from
    Thnaks
     
  2. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    Do you happen to run any executeables from your desktop? (I mean that the exe is on the desktop rather than a shortcut link).
     
  3. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    ... oh :)

    and also, I take it that when you looked at the file you were unable to see any ascii strings embedded that may point to the source. If you haven't, you might want to check out the freeware bintext utility at foundstone

    http://www.foundstone.com/resources/termsofuse.htm?file=bintext.zip
     
  4. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi Dale,

    did you already scan your harddisk with Ad-aware and Spybot? These Spyware applications could possibly help you. ;)

    Regards,

    Patrice
     
  5. Dale

    Dale Guest

    Thanks for that link, the bintext program was able to read the file, guess what, it has all msn contacts and peoples email address's,registry keys, a little more searching and I found out its a backdoor program that only trend micro can pick up, thier are 3 version's of this BDoor.
    Now to try and find out where it is picked up from. Thanks again!
     
  6. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    Cool,

    Glad you were able to track it down

    Regards,

    Dan
     
Loading...
Thread Status:
Not open for further replies.