Home · Maps · About

Home > OTChat

[ Post a New Response | Return to the Index ]

[1 2 3]

 

Page 1 of 3

Next Page >  

(1227759)

view threaded

Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 02:42:07 2014

fiogf49gjkf0d
ad.doubleclick.net ads are even found right here if you don't filter or use an uninfectable OS like our KNOS. "Ads by google" is doubleclick. :(

http://www.cso.com.au/article/555527/malicious-advertisements-distributed-by-doubleclick-zedo-networks/

REALLY bad if you go to various right-wing sites, or happen to be a "supporter of Israel" ... the article above only lists a few of the sites that got nailed, everything from here to Fox News to the usual suspects like Drudge.

If your antivirus didn't alert you to malware, might want to try another antivirus. Sorry to be the bearer, but well ... we're fine on our end because we don't use Windows, Mac or Linux.

Figured I'd give y'all fair warning. Get your machines checked out. You MIGHT be owned unless you use an iphone, ipad or ipod to surf. I grabbed a copy earlier and this shit's NASTY. :(

Post a New Response

(1227760)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 02:57:07 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
And for the righties here who are CERTAIN to be butthurt over this post, the wars of cannons and ground troops have LONG been over. Modern warfare is on the internet and it's all about stealing money. The culprits at large have been around for years, and this is serious stuff for them. Zemot is just another credit card stealer, and provides numerous other, more serious malware, particularly "bots" which are used in denial of service attacks and similar.

The code which exists in Zemot was once used to spread Stuxnet and other goodies which help to attack infrastructure. So go ahead and weat out ISIS, this is the real worry. This stuff can do REAL damage.

Post a New Response

(1227761)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by chicagomotorman on Sat Sep 20 03:45:29 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
Jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jub jjb jub jub

Post a New Response

(1227763)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Edwards! on Sat Sep 20 04:51:47 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by chicagomotorman on Sat Sep 20 03:45:29 2014.

fiogf49gjkf0d
Yet, you were too bitchassed to know it..makes You a cunt cunt cunt cunt cunt cunt cunt cunt.

Post a New Response

(1227785)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Olog-hai on Sat Sep 20 08:12:10 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
Really bad if you go to various right-wing sites, or happen to be a supporter of Israel

Thanks for letting us know that the Russkies are on the side of the libs. Obama could have told us that . . .



BTW, if you're not a "supporter of Israel", doesn't that make you an enemy of Israel?

Post a New Response

(1227802)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Sand Box John on Sat Sep 20 10:13:21 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
I don't see adds here, Sand Box John uses a 602 KB host file to filter out that crap.

On Windows boxes the host file is in %systemroot%\windows\system32\drivers\etc\

127.0.0.1 is your friend.

John in the sand box of Maryland's eastern shore.

Post a New Response

(1227804)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by ChicagoMotorman on Sat Sep 20 10:16:58 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Edwards! on Sat Sep 20 04:51:47 2014.

fiogf49gjkf0d
I am not your enemy.

Post a New Response

(1227819)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 12:10:11 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Olog-hai on Sat Sep 20 08:12:10 2014.

fiogf49gjkf0d
Posts Putin's personal propaganda dispenser to make his point. So don't run a scan, no worries, right?

Post a New Response

(1227820)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 12:15:01 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Sand Box John on Sat Sep 20 10:13:21 2014.

fiogf49gjkf0d
That helps. But it's not just here, the reason why this is major is that doubleclick is Google. The infected ads also show up in Youtube videos where they're embedded in the Flash videos whether you filter or not. And they've showed up on a lot of sites linked to from here as well. Most folks don't know how to filter the regular stuff and Adobe Flash won't expose the embedded ads in the media itself. That's why I felt it necessary to warn folks here, given how many of them routinely visit the most affected sites away from here.

Post a New Response

(1227821)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by chicagomotorman on Sat Sep 20 12:16:45 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 12:15:01 2014.

fiogf49gjkf0d
How touching.

Post a New Response

(1227823)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 12:29:53 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by chicagomotorman on Sat Sep 20 12:16:45 2014.

fiogf49gjkf0d
That's what I love about this place. Try to help people out by giving them a heads-up that they should check their computer because this one has been undetected and well ... good night and good luck.

Post a New Response

(1227825)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by ChicagoMotorman on Sat Sep 20 12:32:04 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 12:29:53 2014.

fiogf49gjkf0d
I said it was touching of you. Now let me go wipe away my tears.

Post a New Response

(1227829)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by salaamallah@hotmail.com on Sat Sep 20 12:54:29 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 12:29:53 2014.

fiogf49gjkf0d
yay !!

Post a New Response

(1227833)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by AlM on Sat Sep 20 13:12:48 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 12:15:01 2014.

fiogf49gjkf0d
Can I get into trouble if I click on a link shown here, as long as I don't click on anything else once I'm at the web site that was linked to?


Post a New Response

(1227838)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Sand Box John on Sat Sep 20 13:26:03 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 12:15:01 2014.

fiogf49gjkf0d
That helps. But it's not just here, the reason why this is major is that doubleclick is Google. The infected ads also show up in Youtube videos where they're embedded in the Flash videos whether you filter or not. And they've showed up on a lot of sites linked to from here as well. Most folks don't know how to filter the regular stuff and Adobe Flash won't expose the embedded ads in the media itself. That's why I felt it necessary to warn folks here, given how many of them routinely visit the most affected sites away from here.

Correct me if I'm wrong, won't the host file redirect embedded link in the Flash videos to 127.0.0.1 if said web site is in the host file?

John in the sand box of Maryland's eastern shore.

Post a New Response

(1227839)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 13:32:02 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by AlM on Sat Sep 20 13:12:48 2014.

fiogf49gjkf0d
The problem these days is mostly with java (not just javaSCRIPT) and Flash exploits. When you go to a site, those will load in the background without you doing anything which is the reason why they're so favored by the bad guys. In many cases, you need to click on the ads but not always. At least here on subchat, the google ads are of the TEXT rather than the display variety but a good number of the links that people go to from original posts go to sites that make a lot of money by force-displaying that stuff.

That's the problem. And the bad guys make it a point to test their stuff every day to ensure that the antiviruses do not detect it today. As soon as some of the AV's catch up with it they change their code in order to go undetected again. Spy vs spy if you will. The bad guys are making a lot of money and can afford to stay ahead of the AV's.

Post a New Response

(1227840)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 13:33:24 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Sand Box John on Sat Sep 20 13:26:03 2014.

fiogf49gjkf0d
Nope ... not if it's embedded. The hosts file only prevents a lookup of any particular site by redirecting DNS to the HOSTS file. If it's linked with a hard IP address, then HOSTS is never consulted.

Post a New Response

(1227843)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by AlM on Sat Sep 20 14:06:47 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 13:32:02 2014.

fiogf49gjkf0d
In many cases, you need to click on the ads but not always.

So I go to a site linked to by one of our fine subchatters. Ads load, including one infected with malware. I never click on that ad, or any other ad or link on that site. I read what's on the link and eventually I reverse arrow to Subchat. And yet somehow now there is something obnoxious on my computer?



Post a New Response

(1227854)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Sand Box John on Sat Sep 20 14:51:58 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 13:33:24 2014.

fiogf49gjkf0d
Nope ... not if it's embedded. The hosts file only prevents a lookup of any particular site by redirecting DNS to the HOSTS file. If it's linked with a hard IP address, then HOSTS is never consulted.

Thank you.

John in the sand box of Maryland's eastern shore.

Post a New Response

(1227882)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 17:30:10 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Sand Box John on Sat Sep 20 14:51:58 2014.

fiogf49gjkf0d
You're MOST welcome!

Post a New Response

(1227883)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sat Sep 20 17:32:56 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by AlM on Sat Sep 20 14:06:47 2014.

fiogf49gjkf0d
That's pretty much how it works. They don't target every computer, every visit. It's random. Ads are sent by sites in a rotation and when the one ad that actually is infected out of all the ads in the rotation comes around, THEN you can end up infected. It's kinda like Russian Roulette without the loud noise. :)

Post a New Response

(1227936)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sun Sep 21 02:09:02 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
For anyone who cares about this issue, there's a very nice little article posted by one of my colleagues as to how serious a problem this is, and why:

http://www.infosecisland.com/blogview/23986-Poisoning-the-Well-Why-Malvertising-is-an-Enterprise-Security-Problem.html

The important thing to understand here is that subchatters are not the specific target of this. It's your EMPLOYER they're after in hopes that you work for a bank, or a power company or some other juicy target they can compromise if you're viewing the various sites AT WORK.

Post a New Response

(1227938)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by pd11604 on Sun Sep 21 02:55:31 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sun Sep 21 02:09:02 2014.

fiogf49gjkf0d
Thanks for the info!

Post a New Response

(1227940)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Edwards! on Sun Sep 21 03:36:03 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by ChicagoMotorman on Sat Sep 20 10:16:58 2014.

fiogf49gjkf0d
That's where you are completely wrong.
You are my TOTAL Adversary.

Post a New Response

(1227941)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Edwards! on Sun Sep 21 03:44:36 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Olog-hai on Sat Sep 20 08:12:10 2014.

fiogf49gjkf0d
Always figured you for a damnable fool.
Now that it's been confirmed..how do you manage to top yourself?

Post a New Response

(1227942)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Edwards! on Sun Sep 21 03:49:25 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by ChicagoMotorman on Sat Sep 20 12:32:04 2014.

fiogf49gjkf0d
No..you were being a dick'...like always-

Post a New Response

(1227953)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by ChicagoMotorman on Sun Sep 21 12:24:22 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Edwards! on Sun Sep 21 03:36:03 2014.

fiogf49gjkf0d
I sure hate to see how you treat your enemies.

Post a New Response

(1227955)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by ChicagoMotorman on Sun Sep 21 12:25:51 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Edwards! on Sun Sep 21 03:49:25 2014.

fiogf49gjkf0d


Post a New Response

(1227987)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by 3-9 on Sun Sep 21 15:19:41 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
FWIW, Zemot doesn't appear to target Linux systems.

Post a New Response

(1228011)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Nilet on Sun Sep 21 15:34:40 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Olog-hai on Sat Sep 20 08:12:10 2014.

fiogf49gjkf0d
Thanks for letting us know that the Russkies are on the side of the libs.

He said nothing of the sort.

Post a New Response

(1228041)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sun Sep 21 17:36:18 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by 3-9 on Sun Sep 21 15:19:41 2014.

fiogf49gjkf0d
Nope ... there's completely separate code for that. :)

You can start here:

http://arstechnica.com/security/2014/03/10000-linux-servers-hit-by-malware-serving-tsunami-of-spam-and-exploits/

And oh yeah, Home Depot. :)

Post a New Response

(1228046)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sun Sep 21 17:47:02 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Nilet on Sun Sep 21 15:34:40 2014.

fiogf49gjkf0d
Olog is living proof that nobody knows you're a dog on the internet. Here's the proff!



Post a New Response

(1228052)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Edwards! on Sun Sep 21 17:58:30 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Olog-hai on Sat Sep 20 08:12:10 2014.

fiogf49gjkf0d
Don't know..you should ask another asshole who thinks like you.
Ted Cruz.

Post a New Response

(1228053)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SUBWAYMAN on Sun Sep 21 17:59:27 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Edwards! on Sun Sep 21 17:58:30 2014.

fiogf49gjkf0d
+1

Post a New Response

(1228062)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by 3-9 on Sun Sep 21 18:33:31 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sun Sep 21 17:36:18 2014.

fiogf49gjkf0d
From the link, it wasn't a technical breach, so much as it was a stolen passwords. Once they were in though - sounds like a huge mess.

Post a New Response

(1228065)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by mcorivervsaf on Sun Sep 21 18:41:52 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
Ugh... Just when I thought that POS 'ClickForSale' adware popping up on my laptop was bad! I recently got rid of that, and now I gotta look out for this? Grr... :(

Post a New Response

(1228070)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Olog-hai on Sun Sep 21 19:03:54 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by mcorivervsaf on Sun Sep 21 18:41:52 2014.

fiogf49gjkf0d
More flexibility after the last election.

Post a New Response

(1228085)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Nilet on Sun Sep 21 20:03:19 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sun Sep 21 17:47:02 2014.

fiogf49gjkf0d
HA! :)

Post a New Response

(1228117)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sun Sep 21 23:37:32 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by 3-9 on Sun Sep 21 18:33:31 2014.

fiogf49gjkf0d
But once they got the passwords, they were able to replace kernel modules with "funny" ones. And that went undetected. Allowing kernel modules and libraries to be replaced remotely is really not such a great ID. Then there's the fustercluck known as "systemd" which even its own developers don't understand anymore. :(

Post a New Response

(1228120)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sun Sep 21 23:39:58 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by mcorivervsaf on Sun Sep 21 18:41:52 2014.

fiogf49gjkf0d
Sorry bro ... world I live in hasn't seen any nasties since 2007. I even go looking for trouble and am perpetually amused at watching that stuff fail to do anything. :)

Post a New Response

(1228128)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by 3-9 on Sun Sep 21 23:53:36 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sun Sep 21 23:37:32 2014.

fiogf49gjkf0d
Sounds like they got root access. Once they can do that remotely, all bets are off. 2-part authentication sounds like the wave of the future.

KNOS is useful for consumer use, but how would it help for servers?

Post a New Response

(1228131)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by Nilet on Sun Sep 21 23:57:11 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by 3-9 on Sun Sep 21 23:53:36 2014.

fiogf49gjkf0d
KNOS is useful for consumer use...

Really? Security has an irritating tendency to be inversely proportional to convenience. Between glacially slow boot times and very little native software, it doesn't seem like something I could easily switch to full-time.

Besides, nowadays very few people write malware than can infect a Mac with a PowerPC processor.

Post a New Response

(1228133)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Sun Sep 21 23:58:08 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by 3-9 on Sun Sep 21 23:53:36 2014.

fiogf49gjkf0d
Definitely would help. Better yet though is to just not give root EVER to remote and fix things like Apache, NGINX and a raft of other apps to not do it as well. Better yet, FREEZE the kernel files so that they cannot be overwritten at all. These days you can mount read-only for your boot drive and inhibit write altogether ...

As to KNOS, it's based on FreeBSD and some of the other BSD's. BSD is designed exclusively for servers, KNOS is our fork specifically for desktops with some added extras like read-only and all I've been recommending that others do. BSD is quite user-hostile, based squarely on if you can't RTFM, then tough tits. But an OS that cannot be modified is the solution to that problem. Gain root and do what? Oh, here's some logs you can read. Can't write to those either. :)

Post a New Response

(1228134)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Mon Sep 22 00:00:30 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sun Sep 21 23:58:08 2014.

fiogf49gjkf0d
Yahoo runs BSD. Apple runs BSD, so do thousands of other major scale server farms. I got a kick out of the whole "Fappening" thing, they didn't actually compromise Apple at all. They looked up email addresses of people with passwords like "princess1" and "password" and reset their Apple ID's. Apple has now fixed that pretty seriously. Yahoo's been clean for a long while now, same for the other BSD users.

Post a New Response

(1228135)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Mon Sep 22 00:03:56 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Nilet on Sun Sep 21 23:57:11 2014.

fiogf49gjkf0d
Absolutely ... convenience and security are diametrically opposed. Given about 16 years now of experience, I believe we've caught the right balance. In the rest of the digital world, try accessing your iCloud now. It'll get even more serious next month once Apple Pay lights up.

Very little native software? That can be true. But when the software is guaranteed to be safe too, and able to provide all of the functionality you need plus work like what you're already used to, it's a really useful tradeoff to not have to worry about being infected.

And then there's the "small fish" not worth writing code for. But as security gets better among the big boys, we're even seeing malware written for the XBox and Playstation now. :)

Post a New Response

(1228141)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Mon Sep 22 00:14:49 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by Nilet on Sun Sep 21 23:57:11 2014.

fiogf49gjkf0d
BTW: Do you still have Java on there? I know this is old, but guess what? Java will still nail you because it's open source and CPU agnostic ...

http://www.foxnews.com/tech/2012/04/06/how-to-protect-your-mac-against-malware/

Post a New Response

(1228142)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by B68 slow poke on Mon Sep 22 00:16:01 2014, in response to Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Sat Sep 20 02:42:07 2014.

fiogf49gjkf0d
But what about what I have because of your recommend. HIT MAN PRO.I have been using it everyday since your recommend.

Post a New Response

(1228144)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Mon Sep 22 00:22:01 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by B68 slow poke on Mon Sep 22 00:16:01 2014.

fiogf49gjkf0d
It's still about as good as it gets. Hitman Pro is recommended because it's a conglomerate of MANY different antiviruses all in one package. If one AV misses it, and another detects it, then you have a MUCH better chance of catching a nasty in the act. But all of the AV's (including the ones in HMP) are losing the battle seriously. There's just too many of them and all of the major antivirus engines are available to test your new malware against on places like virustotal.com.

Just keep changing the code until none of the AV's detect it and you ship it. As soon as any DO, then just change the code until they don't anymore, wash, rinse, repeat.

The REASON why viruses work is because all of the major operating systems ship with what is called "debug" code which allows one program (legitimately a "debugger") to be able to attach to any OTHER program.

All of the major OS vendors now require developers to pay for special versions which would allow legitimate vendors to debug their code inside those "pre-release" versions. There's no reason on this earth for OS vendors to still provide debug hooks in their commercial releases anymore, except for some VERY big corporations that need those debug hooks for their OWN purposes, such as advertising companies and of course governments spying.

If they would just close THAT hole and flip off the powers that be and lock them out, the number of viruses would dwindle real fast if they're unable to "hook into the system." I've been fighting this battle for years, but nobody in the industry is buying.

Post a New Response

(1228146)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by B68 slow poke on Mon Sep 22 00:29:12 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by SelkirkTMO on Mon Sep 22 00:22:01 2014.

fiogf49gjkf0d
AMAZING INFO !

Post a New Response

(1228149)

view threaded

Re: Russkie malware even makes it to subchat. :(

Posted by SelkirkTMO on Mon Sep 22 00:38:19 2014, in response to Re: Russkie malware even makes it to subchat. :(, posted by B68 slow poke on Mon Sep 22 00:29:12 2014.

fiogf49gjkf0d
That stuff is my WORK life. That's what I get paid to deal with every day. :)

Post a New Response

[1 2 3]

 

Page 1 of 3

Next Page >  


[ Return to the Message Index ]