Analyse PIF file

On Mon, 18 Sep 2006 13:32:12 +0200, "Joah Senegal" <bloker DeleteThis @hva.nl>
wrote:

>Someone was sending me a *.PIF file wich is a shortcut to a MS-DOS program.
>I know this kind of files can be harmfull. My virusscanner says the file
>contains no virusses. But the filename is suspicious. So I want to analyse
>this file... I''ve tried to open in by hexedit, and query the properties of
>this file, without any result.
>
>Anyone know how to analyse this file?

You should be able to view the file with a hex editor okay. Maybe you
are attempting to edit the file being linked to?

The reason the filename is suspicious is because of the way windows
treats .pif files. By default, such an extension would be hidden so
for example a file actually called "harmless.txt.pif" might appear on
your computer as "harmless.txt" leading you to believe you are about
to open a harmless text file in notepad and instead you are launching
an executable file of likely dubious origin.


Jim.
 >> Stay informed about: Analyse PIF file 

From: "Joah Senegal" <bloker.DeleteThis@hva.nl>

| Hello all,
|
| Someone was sending me a *.PIF file wich is a shortcut to a MS-DOS program.
| I know this kind of files can be harmfull. My virusscanner says the file
| contains no virusses. But the filename is suspicious. So I want to analyse
| this file... I''ve tried to open in by hexedit, and query the properties of
| this file, without any result.
|
| Anyone know how to analyse this file?
|
| THANKS!
|


Please submit a sample to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:scan@virustotal.com?subject=SCAN

When you get the report, please post back the exact results.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
 >> Stay informed about: Analyse PIF file