0

I recently downloaded a .exe file from a person's github. I scanned the file in virustotal.com and it showed none of the antiviruses detected a virus. When I checked its behaviour, it had access to network adapters. Nevertheless, I opened the .exe but it just opened a terminal and showed something and disappeared. When I asked the guy who sent it to me, he said the program just hacked my personal information from my computer. But the antivirus shows no risk. Can anybody help me with this?

Giving the file link below:

https://github.com/constantinDev/hacktoolv2/blob/master/Tools/GTool/bin/gtool-src-win.exe?raw=true

I have a Windows 10 PC and I was connected to internet at the time of the incident and the program ran in administrator mode.

Improve this question
1
  • A 12 year old could bypass any antivirus in the world for less than $100. Antivirus only protects against those who can't even put in the bare minimum effort.
    – john doe
    Aug 12, 2020 at 17:20

1 Answer 1

Reset to default
4

Online antivirus scanners detect known malware. New malware is not known to them, so it is absolutely possible to have malware that is not detected by any antivirus.

An antivirus installed on your PC can use some more heuristics to detect potentially bad behavior of running software, but this is far from perfect.

You should absolutely not run executable software which you don't trust, and never run anything that is not 100% trustworthy with administrator permissions.

If you look at the source in the repo, this is pretty harmless, it just sends your IP and some system data to a telegram channel. Probably created by a bored teenager.

If the source code actually is the one used to create the executable you ran, that is. I didn't bother to verify that.

Improve this answer
7
  • Can anyone tell me if this is dangerous?If the ip address and system data is shared,is there any problem?
    – Bumane
    Aug 12, 2020 at 13:49
  • 1
    @bumane If the source code in the repo is the real source code for the EXE file you ran, then like Josef said, reinstate Monica, and also it's pretty harmless.
    – user253751
    Aug 12, 2020 at 14:12
  • 1
    @Josef says Reinstate Monica what’s your source for the assertion that virustotal detects 99% only known malware? It’s definitely not true. Write yourself a simple keylogger in C++ and I assure you that it will be detected.
    – dmuensterer
    Aug 13, 2020 at 15:52
  • @dmuensterer i already wrote more than one keylogger which was not detected by any online scanner and even some which where not detected by a antivirus on the target system using all its heuristical magic.
    – Josef
    Aug 18, 2020 at 12:19
  • @JosefsaysReinstateMonica You do know that virustotal is essentially a target system running multiple anti-virus software right? And also: I didn't say it would detect everything. I said, the chance of detection of very simple viruses is very high through heuristics.
    – dmuensterer
    Aug 19, 2020 at 13:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .