Suspicious File

Discussion in 'ESET NOD32 Antivirus' started by Banger696, Jul 1, 2009.

Thread Status:
Not open for further replies.
  1. Banger696

    Banger696 Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    274
    Where's the best place to send a suspicious file? Virustotal says it's clean but it's a 15 byte file which opens the command prompt window and seems to do nothing - was supposed to be a graphical drive analyser.

    File: DriveSpacio0.1.0.exe from hotfiles.net linked from Developers site
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Surely a 15 byte file is not a PE executable, maybe some little code written in asm and compiled to a com file?
     
  3. Banger696

    Banger696 Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    274
    I have no idea. It is definitely an exe file and appears to do nothing. The exe was linked in my ISP Newsletter to the developers site and then to hotfiles.net.

    It opens a command window then nothing NOD32 finds nothing so I need to confirm what I have downloaded.

    Edit: Maybe it is a broken download? With only 15 bytes of the executable being delivered?
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Does the file start with "MZ" at least? If so, then it must be a corrupted exe file.
     
  5. Banger696

    Banger696 Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    274
    Phew panic over, I opened the file with a Hex editor from old DOS days and inside the 15 byte exe file it says "File Not Found", thanks Marcos. :thumb:
     
Thread Status:
Not open for further replies.