5 replies to this topic

[MAM]

Hello, I found a disscussion about Click-Me.exe in diffrent forum´s ...

For example:

http://forum-en.msi....pic=113010.0%29

Can anybody this File exact and analyse, if this Malware or Not ?

And can us tell for that this Click-Me.exe are is, what function and so on ...?

A first look, bring this result: CLEAN from Jotti.

: http://virusscan.jotti.org/en/scanresult/5...4db8fca5d20d904

Downloadlink from the pretended "Malware File", ******************************* this file i am uploadet by Jotti.

Can anybody test this File ?

MAM

[GT500]

The name is "Click-Me.exe", it's 164KB, and it requires admin rights to run. Yes, it is malware.

[MAM]

GT500, on Sep 7 2009, 07:19 PM, said:

The name is "Click-Me.exe", it's 164KB, and it requires admin rights to run. Yes, it is malware.

Ohonest, but Why can not this Malware the most AV vendors discover ?

Is this realy Malware ???

And Malwarebytes' Anti-Malware can not do this too, detecting and removing this ?

But you have now some hint´s, and you took this Malware/ Sample in your signatures/fingerprints now, ok ?

And please come not a round, the corner this the "statement" we will not put such old Malware in our signatures/fingerprints.


Give this some evidence about that File, or "Malware" ?

MAM

[Fatdcuk]

Mam,

I am a Malwarebytes researcher and will look at this file tomorrow to see if it performs any malicious behaviour and whether it needs to be added to the MBAM database.

I have moved this topic to RogueNet forum because you have posted a potential malware source in a help sub forum( PC Help)....this really should not have happened.

If you have suspected/new malware this is the only subforum where you should post a report like that too.

This sub-forum is good for posting about new/suspected malwares as visitors to this part of our forums know that samples here are reported because we do not detect them at the time of posting.

Thanks for your understanding

[MAM]

Ok thanks for the ansewer in this issue.

I can wait.

MAM

[Fatdcuk]

Ok Mam,

After examining the file here are my findings.

It exhibits no malicious behaviour and will not be added to the MBAM database.

Closer inspection inside of the hex reveals it is a support file for an uninstaller package.

Despite the dubious naming protocol this is not malware file