Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I've downloaded a .rar file from an anonymous client, extracted it and tried to open its content from a .rar opener window. Nothing really happened so I am not sure if it was actually run. It contained a .src file which I didn't run directly after it was extracted. I've scanned the file online:
but I am not an expert to tell if it is a malicious file and what it actually can do to my PC. Any help to explain that report would be appreciated.
To give a more general explanation for those finding this question via google:
.scr files are a special variant of windows executable (like an .exe file) originally meant for windows screensaver modules. Once executed (directly or after having been configured to run via control panel), these can do everything (including damage) a windows application running under that user account could do.
The fact these are often misunderstood as a kind of video or data file by the average user (who understands that an .exe file from a doubtful source can be bad news) is nowadays used to spread malware.
It is a scr file, not an src file.
The report says that 12 out of 56 AV vendors classify this file as trojan horse or reason of concern. Wherever you see the tick box that means that the AV solution in the left column didn't find any suspicious pattern. The others say what they believe the file is and most of them say something like "trojan".
