EC-Council
312-50V11 · Question #901
A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may ha
The correct answer is D. Use netstat and check for outgoing connections to strange IP addresses or domains.. In a corporate environment it is not recommended to upload a file to a website like virustotal.
Malware Threats
Question
A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer. What tests would you perform to determine whether his computer Is Infected?
Options
- AUse ExifTool and check for malicious content.
- BYou do not check; rather, you immediately restore a previous snapshot of the operating system.
- CUpload the file to VirusTotal.
- DUse netstat and check for outgoing connections to strange IP addresses or domains.
How the community answered
(46 responses)- A2% (1)
- C4% (2)
- D93% (43)
Explanation
In a corporate environment it is not recommended to upload a file to a website like virustotal.
Topics
#trojan detection#netstat#outgoing connections#malware analysis
Community Discussion
No community discussion yet for this question.