alt.fan.prettyboyPrev. Next
re: MyDream.rar Unlimited download news ..
Ronin (nesScitur@husShmail.com) 2012/03/01 22:48

Xref: news.nzbot.com alt.fan.prettyboy:17020
Path: news.nzbot.com!spool1.sonic-news.com!pull-news.sonic-news.com!nx02.iad01.newshosting.com!newshosting.com!news.glorb.com!news.astraweb.com!border6.newsrouter.astraweb.com!not-for-mail
From: nesScitur@husShmail.com (Ronin)
Newsgroups: alt.fan.prettyboy
Subject: re: MyDream.rar
Date: Fri, 02 Mar 2012 05:48:01 GMT
Message-ID: <4f5058db.116547459@127.0.0.1>
X-Newsreader: Forte Free Agent 1.21/32.243
Lines: 44
Organization: Unlimited download news at news.astraweb.com
NNTP-Posting-Host: cf657ab9.news.astraweb.com
X-Trace: DXC=iGh_^L`bI5Q[3>fhUe^HC[L?0kYOcDh@ZSSH;U<@TWo[\>T:^Al174X`RYkND:4DnX@BGO38UC?<[1:P33jOn12Z5a?H6aGc>;SS1`6WR1SlA\

There is a free online virus-scanning service for files of up to
25Mb at <virusscan.jotti.org>;  it applies 20 different scanners
to any file uploaded to it and returns separate reports for each
scanner.

The file <My-Dream.rar> was reported as infected by 7 scanners:

Avast!       Win32:VB-ABMS
AntiVir      TR/Dropper.Gen
bitdefender  Gen:Variant.Kazy.27727
Emsisoft     Virus.Win32.VBInject!IK
F-Secure     Gen:Variant.Kazy.27717
GDATA        Gen:Variant.Kazy.27727
IKARUS       Virus.Win32.VBInject

For some possibly scary reading, google some of these names.

The following 13 scanners reported <Found nothing>:

ArcaVir
AVG
ClamAV
CPSECURE
Dr.WEB
eset
F-PROT
KASPERSKY
PANDA
QuickHeal
SOPHOS
VBA32
VirusBuster

Note that the same possible malware was diagnosed in 5 different
ways by the 7 scanners that issued warnings.

It is perhaps worth keeping in mind that that 13 -- *most* -- of
the scanners found *NOTHING*:  they can't *all* be correct.

And one might also consider using Tor or similar when submitting
files of the sort posted here to be analysed...


Ronin

Follow-ups:1234
Next Prev. Article List         Favorite