thread closed.  

Last edited by hellopanda on Thu Nov 29, 2012 8:57 pm; edited 1 time in total

Do you have a non-infected file to compare it to?  

- alastairfay

Do you have a non-infected file to compare it to?

Nope, no just one file. wondering how should i examine it if its corrupted or if it contains any viruses. Trying to understand more first before i start examing it.  

More info is needed...what type of file is it, how is it infected, and how is it corrupted?

There's a difference in approaches between an EXE or DLL file that is infected via a file infector, and a document that includes potentially malicious executable code.  

- keydet89

More info is needed...what type of file is it, how is it infected, and how is it corrupted?

There's a difference in approaches between an EXE or DLL file that is infected via a file infector, and a document that includes potentially malicious executable code.

it is just photos that have been compressed to zip file. When i try to open the file, a message is displayed saying that the file is corrupted. Want to find out what other approaches can i try to examine this zip file for further investigation. Any suggestions will be great to me, i'm just doing some research and hope to learn something new. Hope that clears it up.  

What tools are you using to try to open the zip file?

Have you examined the zip file with a hex editor to see if it really is a zip archive?  

A message during extraction from an archive that the file was corrupted would tend to me to indicate that the archive file was broken, not that a file had a virus.

Broken archive: corruption
Virus file: infection

The terminology you're using doesn't match your stated issue.

Is Windows / Winzip reporting the corruption? If it's infected, I'd expect to see that error from your AnitVirus software.
_________________
Tony Patrick, B. Inf Tech, CFCE
www.patrickcomputerfor...s.com/blog
www.twitter.com/Patrick4n6