+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: How to check if a file is backdoored (/showthread.php?tid=3809201)
How to check if a file is backdoored - DosSantos - Oct 16, 2013
Hey,
I'm curious as to know whether the file is backdoored or is FUD? What methods do you use to recognize it?
Thanks :)
* - mrnapolean1 - Oct 16, 2013
(Oct 16, 2013 02:02 PM)DosSantos Wrote: Hey,
I'm curious as to know whether the file is backdoored or is FUD? What methods do you use to recognize it?
Thanks :)
Some words of Wisdom:
1. Never download or run any executable from here. 99.99% are FUD and or backdoored.
2. Never download or execute a file that doesn't have a virustotal scan attached.
3. Never download/allow transfer of files thru services such as Skype ® Teamviewer ® or any other related service.
4. If you must run the file, Do it in Sandbox AND OFFLINE! 100% of backdoored files cannot operate if your computer is physically not plugged into the internet. Just simply unplug the Ethernet cable from the computer.
* - phybeя - Oct 17, 2013
You can also check if the file is binded with anything via Anubis: http://anubis.iseclab.org/
* - ๖ۣۜÑåzgйŀ - Oct 18, 2013
Simply check the file in a virtual machine
use the virtual machine as a host only
then it wont broadcast any information to anyone
do not scan executables on virustotal if you wish to keep it undetected by anti-viruses
* - ♛KinG♛ - Oct 27, 2013
don't download any unknown exe file.
* - TZ- - Nov 1, 2013
"2. Never download or execute a file that doesn't have a virustotal scan attached."
So, if scan is attached, it's safe ?
What if scan is faked, or clean file is scanned and dirty file uploaded instead of scanned file?
Best prevention is to use brain and common sense.