Tag Info

New answers tagged

1

In the year 2015, most malware will spread via two mechanisms, the primary being USB (or derivative, which nearly all hardware is) and the second being TDS (often a combination of adware, parasite hosting, and blackhat SEO) via exploit kits. Yes, the second vector is over the web and the targets are browsers and browser plugins especially Java, Flash, and ...


1

An antivirus program is always useful. The problem with your logic is that you're assuming that you are in control of everything that is downloaded to your machine. Using web applications will invite all sorts of different possibilities into the mix. Unknown Downloads Lots of different things are downloaded to your machine without your knowledge. I just ...


0

Visiting shady websites and downloading files are common ways that a computer could get infected, but they are by no means the only ones. Drive-by downloads that exploit vulnerabilities in the browser, operating system, or plugin (Flash, Java, etc.) can infect your computer if you merely visit a malicious webpage, with no other interaction on your part and ...


2

Of course, you will always need an anti malware program even if you do not download files by yourself. Why ? Because a simple visit to the most innocent website you know, may trigger an attack and install you malware (more likely spyware) that can lead even to a total control of your machine. I advice you to read about drive-by download attacks that can ...


0

Is antivirus needed if a computer doesn't download files but only uses web applications? Yes, always. There are vulnerabilities in every layer of the Internet, so if you have any computer connected to it, it would be prudent to assume you are working in a contested space. AV will not catch everything, but it will catch plenty of malware with known ...


1

An antivirus may help against malware that exploit vulnerabilities to install themselves without user interaction, like browser vulnerabilities, PDF viewer ones, Flash player or Java plugin ones, in which case the antivirus would prevent the payload from executing. This of course assumes the payload is already known to the antivirus, which isn't the case ...


2

By itself, Clamav is not on par with the best commercial alternatives. For best results use multiple detection engines well rated in comparative reviews. Engines with the highest detection rate generally suffer from more false positives, so consider quarantining inconsistent results for later manual checks. Also available are automated sandbox analysis tools ...


1

How do major AVs deal with signed binaries? ie: Does it influence their detecting ability of the signed malware? If so, how? For example: Do they check CRLs and get the binaries with revoked certificates under stronger scrutiny? Do they only check if the certificate was valid at the time of signature? If 1 or 2 is valid (ie certificate not revoked ...


2

Source:http://blogs.mcafee.com/mcafee-labs/signed-malware-you-can-runbut-you-cant-hide It’s been more than a year since McAfee became an Intel company, and the team and I have been privileged to be a part of designing and developing our DeepSAFE technology, as well as Deep Defender, the first available product that leverages this advancement. Recent threats ...


0

"Re-releases" happen by accident all the time, when an infected, mothballed system gets re-activated, or old, infected media gets pulled out of archive. Case in point, my webserver has a log entry for a Code Red infection attempt in 2013, twelve years after the worm was originally released. Because of this, antivirus software does not normally remove ...


0

If you peruse the various vendors catalogs of malware detected, successfully cleaned malware is re-released continuously with tweaks or is polymorphic in a manner that requires updates in detection to take care of software updates their creators apply. Viruses and malware are just like OS systems now. All those security updates that you see released for ...


1

I digress the notion that an open source antivirus database will necessarily be maintained by lots of capable people - this is not how open source works. The principles of open source would entice those that are not motivated by direct financial gain - whether these individuals are highly capable, or not - that is a question of chance or self motivation. ...



Top 50 recent answers are included