- Joined
- Nov 16, 2008
- Messages
- 1,840
Doing network threat analysis for incident responses, etc. Anyways, we monitor network traffic looking for evil, and we got a hit on a suspicious Executable file at a client site... I pulled the captured file and ran some strings on it, this is what I found....
CompanyName
Valve Corporation
LegalCopyright
Copyright 2000-2003 Valve Corporation All rights reserved.
ProductName
Steam
ProductVersion
1.0.0.0
This was not actually the Steam installer, just using strings from that installer. This was fakealert family of mass malware. Anyways, just thought it was interesting.
CompanyName
Valve Corporation
LegalCopyright
Copyright 2000-2003 Valve Corporation All rights reserved.
ProductName
Steam
ProductVersion
1.0.0.0
This was not actually the Steam installer, just using strings from that installer. This was fakealert family of mass malware. Anyways, just thought it was interesting.
Last edited:


















I still have the file and ran it on a malware VM, definitely fake alert family, "Total XP Security" fake anti-virus.