+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: WD detecting virus in my passworded zip file (/showthread.php?tid=6178480)
WD detecting virus in my passworded zip file - arbster90 - Oct 26, 2021
Hey,
I've been having problems trying to distribute my miner, I've been sending the link to it via email, it is hosted on my own domain so xyz.tk/miner.zip and the zip is passworded, so WD shouldn't be able to detect what is inside.
As soon as I download it from my site this morning WD detects the password protected .zip immediately as a virus and removes it:
![[Image: sdfsfd.png]](https://i.ibb.co/r7HmXYR/sdfsfd.png)
The weird thing is if I upload the exact same file to my website and name it miner2.zip, nothing is detected. The miner file within the .zip isn't detected by WD either (tested with Real-time + Cloud-Delivered protection).
Is this because the file is hosted on my own domain and the link has somehow been blacklisted by WD? Has anyone else encountered this when trying to distribute files and what's the best way round it? (other than me uploading miner1.zip, miner2.zip etc.)
Thanks!
RE: WD detecting virus in my passworded zip file - PH0B1421 - Oct 26, 2021
I think you should encrypt this before putting it on a computer.
RE: WD detecting virus in my passworded zip file - arbster90 - Oct 26, 2021
(Oct 26, 2021 10:57 AM)PH0B1421 Wrote: I think you should encrypt this before putting it on a computer.
the file inside the .zip is encrypted and bypasses WD. The .zip is password protected but WD is detecting the .zip as a virus even though it can't detect what's inside.
RE: WD detecting virus in my passworded zip file - Yerba - Oct 26, 2021
(Oct 26, 2021 01:07 PM)arbster90 Wrote: the file inside the .zip is encrypted and bypasses WD. The .zip is password protected but WD is detecting the .zip as a virus even though it can't detect what's inside.
I think the link to the "website/miner.zip" might be flagged previously if you placed detected file with this name, I think you can't avoid it being deceted from this url, you need to rename the file, that's the only possible way I can think of.
RE: WD detecting virus in my passworded zip file - Pikzul - Oct 26, 2021
(Oct 26, 2021 04:31 PM)Yerba Wrote: I think the link to the "website/miner.zip" might be flagged previously if you placed detected file with this name, I think you can't avoid it being deceted from this url, you need to rename the file, that's the only possible way I can think of.
Most logical response. Agreed.