Hack Forums
Just downloaded a zip that is being detected as a trojan and ran the exe - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Just downloaded a zip that is being detected as a trojan and ran the exe (/showthread.php?tid=5902497)



Just downloaded a zip that is being detected as a trojan and ran the exe - Sausage411 - Nov 2, 2018

I downloaded this zip

https ://anonfile. com/Q9P7qbkebc/WinRAP_v1.25_zip

and ran the program in it called winRap

shortly after out of curiosity i checked it on virustotal and 5 engines checked it as malware
https ://www .virustotal. com/#/file/5ac28644648947e1541d5cfe0c94c1069bbf83f46c451ab2417f44324e721e6c/detection

Can someone please tell me if  this is just false detection or if i need to do something in order to remove it?

thanks very much.


RE: Just downloaded a zip that is being detected as a trojan and ran the exe - Glossein - Nov 2, 2018

This is most likely not a false detection. You need to remove it from your PC.


RE: Just downloaded a zip that is being detected as a trojan and ran the exe - MAST3RM1ND19 - Nov 3, 2018

Hi just incase download and run there
https://nobotsecurity.com/
https://www.adlice.com/download/roguekiller/
https://www.malwarebytes.com/


RE: Just downloaded a zip that is being detected as a trojan and ran the exe - 32x0LF - Nov 3, 2018

Be very careful when running a file especially on your production pc. scan the file on virus total or used sand boxie.


RE: Just downloaded a zip that is being detected as a trojan and ran the exe - Aura - Nov 3, 2018

Looks like a Mono/NET exe so you could open it in dnSpy or iLSpy and see if it's actually malicious or not.


RE: Just downloaded a zip that is being detected as a trojan and ran the exe - Elvira - Nov 3, 2018

it couldve been false but just scan to be sure