Veremo
-
Posts
25 -
Joined
-
Last visited
Posts posted by Veremo
-
-
7 hours ago, Kristal said:
user can run .exe malware file without unarchiving and infect a system
Could you please elaborate what do you mean by that ?
-
If gmail doesn't work for you.. just use different email provider (what about outlook.com ?)
-
VT says 1fa45104b40630d08b83513cd2424ab72d79b0e1 was signed by Dexon Software.
Additionally this file contains timestamp countersignature which proofs it is not "recent"Date signed 11:53 PM 11/30/2005
-
This file is genuine Windows file. It is signed by Microsoft and seen on many computers in the world (hxxp://whitelisting.kaspersky.com/advisor#search/8a511a096bb626405f760d432abbfae6a0870c8c)
You can't blindly believe online services showing you some indicators.. If they were so good, there would be no space in the market for proper AVs
-
-
It seems that ESET is the only top vendor protecting his customers from very beginning:
Yes, the detection is correct and was confirmed by ESET viruslab
ZoneAlarm server was not hacked, PUA file is signed by Check Point Software Technologies Ltd
-
Obviously NOD32 is able to detect macro viruses
-
Maybe it will give you some hint: hxxp://languagelog.ldc.upenn.edu/nll/?p=16345
-
OK, I probably misunderstood you:
In some cases, where the "crackers" don't have access to an unprotected fileWhen I read it first time I believed you think it is possible to make reversing w/o access to the code, but it seems that you were talking about proper unpacking
PS. submit incorrectly detected file to the ESET viruslab
-
Some of User's statements are incorrect
but in general he is right and it is expected to see cracks/keygens/patchers detected by ESET as unsafe applications.If something is detected as a trojan or virus, is probably NOT a crack/keygen but malware/virus
-
"The road to hell is paved with good intentions"
Windows executable files have complicated format. If file does not follow this format (ie. was truncated, some parts overwritten) it can't run and is corrupted.
Adding detection for corrupted files is useless. It causes increase of virus db without any gain. Bigger virus db means bigger RAM consumption, longer update, slower scanning.
-
If ESET says something is bad, it is. Deal with it
"You also understand that feytools.com cannot and does not guarantee or warrant that files available for downloading through the Site will be free of infection or viruses, worms, Trojan horses or other code that manifest contaminating or destructive properties"
-
My observation - when you send really malicious file your submission is resolved quickly, when you send not malicious/corrupted/useless file - it gets low priority and you often get no answer.
-
-
What is the URL and hash of file(s) you downloaded ?
-
I think big difference is detection and cleaning of viruses. Only more advanced products can deal with polymorphic file infectors.
ESET can do it, MB - can't.
-
Partnering with external company means advocating their solution and being blamed for partner mistakes.
I don't think ESET should do that in times of surveillance.
Arakasi - "Backup and Restore was deprecated in the most recent versions of Windows" (hxxp://en.wikipedia.org/wiki/Backup_and_Restore)
-
Same post on Emsisoft forum..
"We are not bad or malicious".. just useless
-
VirusTotal detection for this file:
Not detected.
-
You try to silently run .vbs from self-extract RAR.. It is suspicious.
If you want to use it yourself just add it to exceptions, if you are going to make public - just don't do it, it will be flagged by more AVs I guess.
-
This is the second time you tell about FP doing something suspicious. Maybe there is some problem with you, not with ESET..
-
You can check your RegSvcs.exe with VirusTotal but this is unlikely malicious.
Log form SysInspector and/or Sysinternals Autoruns could tell more.
-
How many users actively search for Ask! toolbar because they know it's cool software and want to have it on their own computer?
I think most of people searching internet for Ask toolbar want to find a way to get rid of it.
-
AwardKeylogger is detected as a potentially unsafe application.
Please check your settings - hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN3204
Submission of Malware Samples for Analysis
in Malware Finding and Cleaning
Posted
Wow, and how much are you going to pay for such service ?