novice 20 Posted February 16, 2015 Share Posted February 16, 2015 (edited) Hi, MBAM reported a certain file ( Xdr.exe) as malicious; on check on VirusTotal detection ratio was only 2 /57. Checking later , detection rate was 5/57, then 8/57, then 10/57 and now 12/57, see : https://www.virustotal.com/en/file/cce957569074ae590efdd45e774b004d3cd95e1643581fd9e7c5ea548745c155/analysis/ I reported the item to ESET, but so far ESET doesn't show any detection. I would expect for something reported, the signature would be generated faster. Thanks! Edited February 16, 2015 by novice Link to comment Share on other sites More sharing options...
Administrators Marcos 4,907 Posted February 16, 2015 Administrators Share Posted February 16, 2015 It's a kind of downloader. It wouldn't work at the moment and the url from which it downloaded payload was blocked a month before the file was submitted to VirusTotal. That said, ESET users have been protected. Link to comment Share on other sites More sharing options...
Solution novice 20 Posted February 17, 2015 Author Solution Share Posted February 17, 2015 As of this morning, (Feb17) , xdr.exe is detected by ESET as " Win32/TrojanDownloader.Agent.BCH Trojan" Link to comment Share on other sites More sharing options...
Recommended Posts