Conor55 Posted March 24, 2011 ID:404489 Share Posted March 24, 2011 My father had searched in google "What happenedin Glasgow" (About darts.)And a thing downloaded called What_happenedin_glasgow_darts.com,It is a MS-DOS file, the description is "fanctbplr .NET Runtime Just-In-Time Compiler", I uploaded it to VirusTotal, and it came back with 1 AV finding it, Which was Ikarus, which I've personally never heard of, and don't know if it's any good. The file was from cultural5.boneki.com, which doesn't come up with a lot of matches on Safe Web extensions. Link to post Share on other sites More sharing options...
Conor55 Posted March 24, 2011 Author ID:404512 Share Posted March 24, 2011 Obviously, I can't see it being malicious, because it's a .com file, and I don't exactly know how it would execute.When my father tried to run it, it was running from downloads, and the file was MS-DOS.EDIT: oops, must be losing my eyesight in my older age, missed the edit button. Link to post Share on other sites More sharing options...
DarkSnakeKobra Posted March 24, 2011 ID:404529 Share Posted March 24, 2011 I would get him checked out in the hijackthis forum.In many computer operating systems, a COM file is a type of executable file; the name is derived from the file name extension .COM. Originally, the term stood for "Command file", a text file containing commands to be issued to the operating system (similar to a DOS batch file), on many of the Digital Equipment Corporation mini and mainframe operating systems going back to the 1970s.[1] Link to post Share on other sites More sharing options...
Guest remixed Posted March 24, 2011 ID:404532 Share Posted March 24, 2011 Two comments;1; cultural5.boneki.com is hosted by Leaseweb which is not a good start. But...2; Ikarus is a German AV which have something of a reputation for False Positives. I've tried to replicate the search without success. Link to post Share on other sites More sharing options...
Conor55 Posted March 24, 2011 Author ID:404535 Share Posted March 24, 2011 Scanned with MBAM found nothing, Virustotal only 1/42 and it was only Ikarus.LDtate said I should just delete it, which I did.Thanks anyway. Link to post Share on other sites More sharing options...
DarkSnakeKobra Posted March 24, 2011 ID:404539 Share Posted March 24, 2011 You're welcome.The page just redirected google on my end.... Link to post Share on other sites More sharing options...
Conor55 Posted March 24, 2011 Author ID:404549 Share Posted March 24, 2011 How so do you mean redirected Buttons?ALSO: www.siteadvisor.com/sites/www.boneki.com tried to download a binary file when I searched it. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 25, 2011 Root Admin ID:404574 Share Posted March 25, 2011 Once in a while if there are timing or caching issues the browser will attempt to download a server side script file instead of the page. Try opening it in NOTEPAD and you should be able to post the text here to see if that is what happened or not. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now