dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
45

therube
join:2004-11-11
Randallstown, MD

therube to Jrb2

Member

to Jrb2

Re: Beware of Combofix - contains infected file

Sure would be nice if they posted a hash of the infected version.
And better yet if they also posted hashes for their prior, known good versions.

(So like is my 1-28 version good or bad, or have I lucked out by a few hours?)

If mine is good, then maybe I could use Combofix to fix Combofix .
Grinler
join:2004-03-31
New York, NY

1 recommendation

Grinler

Member

Waiting on this information from the developer. At the same time, if you scan your current version and it shows clean in virustotal then you are good to go.

therube
join:2004-11-11
Randallstown, MD

therube

Member

quote:
SHA256 Hashes of known affected versions are:

4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333
e5341c3c32a9726a2d3dd1ac0b90f13d896581ab8707dd0a17431df061a2a71d
4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333
e95f77fd437b16312fbd66a02fed8b179968a7615c1bd3cd3b2fd86879b4bbc8

quote:
Added hashes of the known affected version to first post. Hashes can be found below as well:

SHA256:
4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333
MD5: c71b0515ef1200755ae61a5c4c9e8a86

»www.bleepingcomputer.com ··· 431.html

(Now we need an SHA256 to MD5 converter .)

So presumably what I had gotten earlier, 1 day prior, is OK.
(It came from Softpedia, though I notified them of this issue so don't know if they're still hosting or not?)
Jrb2
Premium Member
join:2001-08-31

Jrb2

Premium Member

The file, which I scanned earlier at VT, was the one with checksums:
SHA256:
4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333
MD5: c71b0515ef1200755ae61a5c4c9e8a86

I did post those checksums in my previous post in this thread, along with the results at VT at that moment, and with the alert by NOD32.
I wasn't at that moment the first one who had scanned it there.