On the other hand, a Google Search for GenBL Olympus seemed to show several variants, and nobody seeming to know exactly what it does. So deaf24c0 is the first 8 'digits' of an MD5 hash. I began to believe that much more when I noticed VirusTotal's 'Details' tab shows an MD5 starting with deaf24c0. At first, I thought that might be some sort of meaningful word, but after a while I started to think that was just a hexadecimal number (which just happens to start with the English word 'Deaf'). The 'DEAF24C0' is made up of entirely hexadecimal. The W32/GenBl.DEAF24C0!Olympus looks more specific, so I used that as a search string.Īnother generic site (meaning, not closely tied to just one vendor), CVEDetails,Īfter going to CAT-QuickHeal's Ultimate Security Vulnerability Datasource, I searched for W32/GenBl.DEAF24C0!Olympus or other variations, but found nothing tell-tale. And, which family of Trojan Horses is it in? IGeneric.

Once you find something is flagged, the next thing worth checking out is, 'Why was it flagged?'įor CAT-QuickHeal's, it appears to label the softare as a Trojan (short for 'Trojan Horse', named after the famous trap, and used in the Computer Security industry to refer to software that acts like it does one thing, but has a very sinister purpose). (The columns were unlabeled, so I inserted the meanings based on what they looked like they referred to.)Īnti-Virus Software: TrendMicro-HouseCall I will start with data from the referenced web page, which I refer to.

Avast blocking bethesda creation kit