New answers tagged antivirus
0
These detections you see are false positives because the original DeFixed_Edition.rar (OllyDbg - FOFF Team Edition 2.0) is falsely detected by false positives too.
If you update the file PhantOm.dll (PhantOm Plugin) with an updated version of the plugin, you would see the number of false detections decreases significantly.
2
It’s likely the antivirus products are detecting the usage of MPress itself as a sign the file is malicious.
Executable packers create files which are usually significantly different from “normal” programs in a few ways:
the headers are minimised, the MPress site claims to remove standard features like debug directories and relocations.
executable ...
0
Virustotal uses yara on the backends, that basically is a regex implementation for search patterns in files, for detect the malware. Your problems looks like probably there is an issue on their side with that particular scan. I will suggest you contact them and try to resolve the issue.
1
In fact malwares can be present non only in plain files, but also in hidden parts of a file system (hidden files, apparently non allocated blocs, system blocs, etc.)
So, you have two different action here:
select what should be transfered
ensure that what is transfered should not contain malware
For the first part, someone, or a group of persons should ...
0
Install a Linux with good AV (ClamAV) and then copy the files.
The AV should scan while copying and prevent any problems.
As far Windows XP, Avast still has a version compatible with XP, so you may install that, use it on XP and then do the Linux+ClamAV part.
There's also another option: to put the files on a storage (like external HDD) and then use up to ...
2
Is this setup truly insecure as mentioned by other IT companies and what are best practices for securing such a setup?
The quality of both open source and commercial solutions differ widely. There are commercial firewalls which more or less do what pfSense does and there are firewalls which do a lot more. From what you mention as security features of your ...
1
ClamAV a popular open-source AV scanner has a portable app version available on portableapps.com. This should allow you to manually scan drives and files from the USB drive, but the always-on background scanner will not work as that requires installation.
1
I was wondering if antivirus software can detect when a PC get's hooked to BeEF
No. However, it is possible for AV to detect the JS hook file in the browser's cache, similarly to how it will detect JavaScript based heap spraying libraries.
A few years ago there was an open source browser plugin "Vegan" released that showed some examples of how BeEF could ...
2
I was wondering if antivirus software can detect when a PC get's
hooked to BeEF.
I am afraid you don't understand what BeEF is. BeEF is a browser exploitation framework that can inject malicious JavaScript into a website with XSS vulnerability. That in no way means hooking your PC, rather more like hooking your browser tab.
Can an antivirus detect that?
...
1
Most file formats (such as videos) aren't going to execute code unless:
The file is somehow a valid executable and you purposefully execute it
The application viewing it (e.g. a video player) has a specific vulnerability, and the file contains crafted content to exploit that specific vulnerability
In either case, there is no way to give you an answer ...
1
Viruses manipulate the way the operating system communicates with its components, so the antivirus must necessarily act in advance by blocking the attempt. If this means installing system components that act at the kernel level, a previously installed antivirus could identify the attempted manipulation as malicious, even if the software is actually used to ...
16
A computer virus is just a file, is not something that will be magically activated by itself and wreak havoc around. You can treat it just like a normal file: delete it and it's gone.
If you uninstall the AV, some will empty the quarantine directory, some not. In the event of the AV not clearing the quarantine, you will end up with a folder containing the ...
19
Although a lot depends on the anti-virus software, I'll try to answer your questions:
1) What is the best practice and secure way to deal with them? Delete from quarantine, or let them in there?
Do you plan to study the virus and its working? If yes, then you might want to keep it (This will require a restore of the file).
Do you think it might be a ...
3
"Is it necessary or is it a way to be forced to only use the one product?"
It depends. There are many, many cases where overlapping AV fight with each other and cases where certain products work well together. As products evolve and add new methods of detection, it becomes increasingly difficult to predict the effects of interaction.
I'm not sure what ...
0
In case of Windows-based HP thin clients (Windows Embedded Standard 7 either Windows 10 IoT Enterprise based) Windows Defender is included and enabled by default:
Windows-based HP thin clients - Antivirus Software Support.
http://h10032.www1.hp.com/ctg/Manual/c05316314
Top 50 recent answers are included
