khairulaizat92 9 Posted February 3, 2015 Share Posted February 3, 2015 (edited) Hi there, have you guys on ESET has seen about this web? Its update daily new "might be" viruses. It might interest you guys on ESET VIRUS RESEARCH. Its tested the files using virus total. hope this can improve the detection rate of ESET: hxxp://malwaredb.malekal.com/ Samples: https://www.hybrid-analysis.com/submissions Samples: hxxp://androidsandbox.net/samples/ *As stated, all this link brought you to a site that collecting samples of Viruses Malware Ransomeware etc. As there are a lot of submission, Some MIGHT BE VIRUSES some MIGHT BE NOT. Edited February 3, 2015 by khairulaizat92 Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted February 4, 2015 Administrators Share Posted February 4, 2015 I've checked the samples on the most recent page. Out of 51 samples, only one was undetected that should be. However, ESET blocked it upon execution so users were protected. To sum it up, the detection of recent malware samples was 100% and improving the detection rate beyond 100% is unlikely to happen Link to comment Share on other sites More sharing options...
khairulaizat92 9 Posted February 7, 2015 Author Share Posted February 7, 2015 (edited) I've checked the samples on the most recent page. Out of 51 samples, only one was undetected that should be. However, ESET blocked it upon execution so users were protected. To sum it up, the detection of recent malware samples was 100% and improving the detection rate beyond 100% is unlikely to happen Hi, here are the new one, i have double scan it with ESET recent database, and i didnt know why they didnt respond in this two days. the sample has been extracted from malwaretips a collection from one of the forumer there, out of 170 sample, eset seems to miss this 4 file: https://drive.google.com/file/d/0B8Xxzl6GvimabHNxdkJCVnpISDNNM0xTTzZORl9YVmdVbjBR/view?usp=sharing In RAR; Password: infected Virus Total Report: https://www.virustotal.com/en/file/8820eac43b60cc63c728a1285cbbb85edd81ca51568756c5b609f4e093a1617b/analysis/1423308764/ https://www.virustotal.com/en/file/e8186a03a53cba3cfe6b0ea3bcbc7893eb1da84e612060ecfffb8110fa0199a2/analysis/ https://www.virustotal.com/en/file/66c9e75398c202c5c2b917fd0fe9a3089c6a1fa5e74a64c6a2c2b5d6acaf2f14/analysis/1423308261/ https://www.virustotal.com/en/file/2b323a79575a1cb941be4258732dcffc01761c79b484d26273b87cb2f2bade80/analysis/1423308936/ *UPDATE: Recent update of ESET 11140 detect and remove all of the sample. Regards Edited February 8, 2015 by khairulaizat92 Link to comment Share on other sites More sharing options...
khairulaizat92 9 Posted February 11, 2015 Author Share Posted February 11, 2015 (edited) Hi have submitted some samples to ESET but ESET says the sample corrupted: Dear ES4UG Support Team,Thank you for your submission.The file(s) you submitted is/are corrupted and therefore not subject to detection.Regards,ESET Malware Response Team The files are at the link below: hxxp://www.mediafire.com/download/m60g2kcg17rfvfg/ESET_Not_Detect.rar Rar Archive Password: infected But i wonder, as VirusTotal , Hitman Pro (Uses cloud bitdefender and kaspersky scanner) still can detect this as virus. Can anyone explained to me, the proper condition of the sample to be submitted to ESET. P/s: These Malware samples has been isolated and collected by Malware hunter on malwaretips forum. Edited February 11, 2015 by khairulaizat92 Link to comment Share on other sites More sharing options...
Veremo 6 Posted February 13, 2015 Share Posted February 13, 2015 "The road to hell is paved with good intentions" Windows executable files have complicated format. If file does not follow this format (ie. was truncated, some parts overwritten) it can't run and is corrupted. Adding detection for corrupted files is useless. It causes increase of virus db without any gain. Bigger virus db means bigger RAM consumption, longer update, slower scanning. Link to comment Share on other sites More sharing options...
Recommended Posts