 therube join:2004-11-11 Randallstown, MD | reply to Jrb2
Re: Beware of Combofix - contains infected file Sure would be nice if they posted a hash of the infected version. And better yet if they also posted hashes for their prior, known good versions.
(So like is my 1-28 version good or bad, or have I lucked out by a few hours?)
If mine is good, then maybe I could use Combofix to fix Combofix . |
|
 | Waiting on this information from the developer. At the same time, if you scan your current version and it shows clean in virustotal then you are good to go. |
|
|
|
 therube join:2004-11-11 Randallstown, MD | reply to therube
quote: SHA256 Hashes of known affected versions are:
4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333 e5341c3c32a9726a2d3dd1ac0b90f13d896581ab8707dd0a17431df061a2a71d 4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333 e95f77fd437b16312fbd66a02fed8b179968a7615c1bd3cd3b2fd86879b4bbc8
quote: Added hashes of the known affected version to first post. Hashes can be found below as well:
SHA256: 4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333 MD5: c71b0515ef1200755ae61a5c4c9e8a86
» www.bleepingcomputer.com/forums/···431.html(Now we need an SHA256 to MD5 converter  .) So presumably what I had gotten earlier, 1 day prior, is OK. (It came from Softpedia, though I notified them of this issue so don't know if they're still hosting or not?) |
|
 Jrb2Premium join:2001-08-31 kudos:3 | The file, which I scanned earlier at VT, was the one with checksums: SHA256: 4524611a78ddd40afa7e13238da230302786c546d1f824e6e7dea480a5d55333 MD5: c71b0515ef1200755ae61a5c4c9e8a86
I did post those checksums in my previous post in this thread, along with the results at VT at that moment, and with the alert by NOD32. I wasn't at that moment the first one who had scanned it there. |
|