VirusTotal/ Other sites, NOT 100% safe

Recently, I had my computer keylogged from a program that "checked out" with Virus total and my own virus scan.

Story, I was asked to "verify" a program as the middleman of the trade. I scanned it with Virus Total, it came up with ONLY 1 positive reading, which was only "suspicious". I clicked on the program, nothing happenned, so I told both parties that the program did not work.

I later realized that it was all just a ploy. The program was a trojan, which they were busy using to download (more detectable) programs, and even circumvented the firewall I had set. I only realized that I had been hacked AFTER my virus software's auto protect was enacted.

Luckily, my account had a bank pin, and no real important info was taken I promptly pulled the power, disconnected my internet, and reformatted.

That said, Virus Total will detect 99% of malicious software, but the hacker claimed that he had designed the program to circumvent this detection.

Just some food for thought.

 

Thanks man, I appreciate the heads up.

 

that why you only download stuff from trusted people/websites

 

i use also virusscan.jotti.org
but never use anything if it says theres a positive.

 

That's why I never download anything from people haha

 

You know something called a FUD crypter ?

 

Nope.

you could explain technically, but all my point is...

Virustotal has been used as a golden standard to test for malware. it doesn't work at this "guarantee", but will find the kiddy scripts.

 

You can edit the Hex code of the program so that anti-viruses won't detect it. But the hard part is that it takes quite a long time to find out what the hex is that a certain anti-virus is reading as a 'virus'. Take AVG. Once you correctly edit the hex so AVG won't think it's a virus, ... all other anti-viruses most likely read a different string of hex. so you'd have edit lots and lots of hex to make it so all the software Virus Total scans it with would not detect anything. Not to mention it's pretty hard for you to find a hex-value in it to edit so that will allow the program to still correctly function...

wow, kind of hard to explain.

Although, I guess it is possible to make a virus so that VirusTotal won't find any threats. Easier if you find a crypter.

 

I just use AVG :|

 

lol are u sure about that kid?

 

It isn't hard at all to make something fully undetectable.

 

Yeah, thanks for informing, and I'll be more cautious because some of my friends claim that Virustotal detects anything 100% sure...

So once again thank you.

 

Yea I suggest you get FireFox Browser 3.1. Its scans your downloads before download. Also get Avast, or AVG they catch the virus, malware, Trojan, etc before it gets to your computer and removes it.Try using online anti virus/malware scanner they help out alot.

 

I use AD-Aware, AVG, and i also use the latest version of firefox with NO-Script and i dont download things from people ever.

I also keep my downloading to a minimum

 

Well, if you were to make your own keylogger from scratch or something, then you couldn't really expect ANY antiviruses to detect it.

 

exactly, if you make it yourself then as long as antivirus companies dont get a hold of it it will remain UD.

 

Hmm, there is no easy ways of making FUD file...
Cuz you can analize the code, and you can send it to VirusTotal and the Antiviruses companies analize the codes, updates the Antiviruses and the file gonna be detected. (It means, it gonna be detected soon (if you send it to VirusTotal))

I suggest you to get another antivirus like ESET Smart Security 3 or Kaspersky Internet Security 7. Oh yeah, sometimes stupid peoples tell you things like "this is a good video" and send you an .exe (executable) file, thats really stupid, so be aware of .exe files.

 

Not really. Chances are you will be making a virus that is a small variation from another, in which any generic scan will catch it.

And I really doubt any free/online scanner would've done much better. From what I see, there is NO anti virus or collect of anti viruses that can do it all.

 

Thats dangerous. Ill keep a lookout for that.