[stunnel-users] trojan in stunnel-5.04-installer.exe ?

• Previous message (by thread): [stunnel-users] Support on windows 2012 SR (32/64b)
• Next message (by thread): [stunnel-users] STunnel Connection closed: 150 byte(s) sent to SSL, 0 byte(s) sent to socket
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi stunnel folks,

a client informed us about trojan warning in stunnel-5.04-installer.exe

can anybody explain this "behavioural information"?

DNS requests
VBOXSVR.ovh.net

https://www.virustotal.com/en/file/045145b4e6ef66d29774b558837bd693a0dbab9f7295586da9e5f0de4c5a7481/analysis/1412357544/

additonal:
https://anubis.iseclab.org/?action=result&task_id=1beba124664d67ea4914aa2b25d3c8ecb&format=txt

stunnel-5.05b4-installer.exe does not have it, but flagged as trojan by
2 AVs too

https://www.virustotal.com/en/file/ac4f98c13a0a9f62cc118faa91483a1a5c0a712891a46b9e8089ddec59a0438b/analysis/1412358545/

stunnel-5.03-installer.exe
https://www.virustotal.com/en/file/803bc85fbc80f22d71b13d4180e2d51c02586b2cc611169961a2745e47e31c4f/analysis/1412358731/


Thanks

• Previous message (by thread): [stunnel-users] Support on windows 2012 SR (32/64b)
• Next message (by thread): [stunnel-users] STunnel Connection closed: 150 byte(s) sent to SSL, 0 byte(s) sent to socket
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]