Curious135468 Posted June 3, 2022 ID:1518465 Share Posted June 3, 2022 Hi, I opened a suspect PDF. It turns out the person who sent it to me was themselves phished and I am concerned that the PDF they sent me may have contained malware. Is there a way to find out? Here is my virustotal report: https://www.virustotal.com/gui/file/476f8a3391d00f07de7c6179941f1f55123a31d5385b48bf809bf3f8f154237b/behavior Please help! Link to post Share on other sites More sharing options...
1PW Posted June 3, 2022 ID:1518479 Share Posted June 3, 2022 Hello @Curious135468 and : For experts to begin a thorough analysis, please zip the .pdf file in question and attach that zipped archive file to your next reply in this topic. Thank you. Link to post Share on other sites More sharing options...
Curious135468 Posted June 3, 2022 Author ID:1518547 Share Posted June 3, 2022 Some confidential info in the PDF so am hesitant to upload. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 3, 2022 Root Admin ID:1518572 Share Posted June 3, 2022 Good day, @Curious135468 By uploading it to VirusTotal it is no longer confidential. There are thousands of people with access to download and review that document. That said, there were no signs or indicators that were revealed in the document to indicate it was a threat. For complete safety though you may want to screenshot its contents and create a new fresh document if needed. Again though there are no signs of infection from it. We can help you scan your computer as well to make sure it's safe if you like, just let us know. Thanks Link to post Share on other sites More sharing options...
Curious135468 Posted June 3, 2022 Author ID:1518581 Share Posted June 3, 2022 Thanks. What about the 4 files it dropped? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 3, 2022 Root Admin ID:1518591 Share Posted June 3, 2022 I'll ask someone to decode it if possible and see what they have to say Link to post Share on other sites More sharing options...
Curious135468 Posted June 6, 2022 Author ID:1518799 Share Posted June 6, 2022 Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 6, 2022 Root Admin ID:1518916 Share Posted June 6, 2022 I've reviewed and monitored the file and I asked a couple of others to check it out as well. The stream files appear to just be blob data, without something associated to run it even if it were bad it wouldn't be able to run. It goes out to this site, but even there nothing odd experienced and it only went there because I clicked to allow it. https://www.businessbillpay-e.com/ Again, probably best we scan your system if you're still concerned. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 20, 2022 Root Admin ID:1521250 Share Posted June 20, 2022 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts