4 ms·
This is true and I can confirm this. I sincerely urge everyone to check any executable for viruses before they double click on it, while running on Windows, esp
by neya 14y ago
This is true and I can confirm this. I sincerely urge everyone to check any executable for viruses before they double click on it, while running on Windows, especially!
Just because your antivirus scan doesn't tell you that it's a virus, doesn't mean the file isn't infected. Always, try uploading the file to a cloud based solution like http://virustotal.com http://virustotal.com which will return scan results from several anti-virus engines. Even if the detection ratio is as low as 2-3, you should be extremely cautious.
Attackers on the internet generally store Viruses inside a container like RAR or Zip and password-protect them. And they supply the password separately. This can be seen in forums, etc. where there is a lot of traffic. The logic behind is that when you run a scan against a virus package hiding behind a password-protected container like RAR or Zip, the anti-virus engine will fail to determine that the file is infected and some engines will even tell you it's clean! Always extract these files, scan it, or upload to a cloud scanning solution and then run it on a sandbox environment to be safe.
I have been a victim of several such attacks in the past (several years back) wherein these files were sent to me as Email attachments and the password was mentioned in the email body as something like "Hurry, open this, run this..etc". And even many popular emails vendors like Gmail fail to detect such files (even till date). Just don't fall for it! Maybe that free smiley software isn't worth it, after all?
For my fellow Windows users, there is an excellent free anti-virus that comes with a Virtual Kiosk and Sandbox mode (meaning, if you run anything inside a sandbox, even a virus won't be able to affect your computer) provided by the popular security guys Comodo:
http://www.comodo.com/home/internet-security/free-internet-security.php http://www.comodo.com/home/internet-security/free-internet-s...
Cheers!
- dsl 14y agoHere is a demo of a sandbox-escape for Comodo from July http://youtu.be/TopCisbEbWU http://youtu.be/TopCisbEbWU Even full blown VMs like VMware (CVE-2008-0923) and VirtualBox (CVE-2011-2305) have known escapes. The only thing worse than running untrusted code on your box is giving other people on the internet a false sense of security that its somehow OK to do so if you install magical snake oil.
- neya 14y agoY u mad bro? Advising people to install an Anti virus package isn't exactly the same as selling snake oil. I don't intend to promote any product, including Comodo, but I don't think if we go by your rule we'll be able to settle with any anti-virus s/w. All of them have some known loopholes or the other. Advising people not to install an A/V package because of <insert youtube video here> is even more dangerous than selling snake oil, dude.
- dsl 14y ago> and Sandbox mode (meaning, if you run anything inside a sandbox, even a virus won't be able to affect your computer) That is a pretty bold, and demonstratively false statement. You should retract it.