Reply to thread

Message

<blockquote data-quote="cruelsister" data-source="post: 1072577" data-attributes="member: 7463">If by that you mean if Kaspersky real time was installed, then there would have been no infection as K would have detected the original malware and deleted it. As for other AV&#039;s the detection rate is spotty (and could be made more so by manipulation of the original, making it close to zero-day).As to other 2nd opinion scanners, next week will be the same versus NPE (actually this video is part 1 of a 4 part series- next NPE, then Fun Facts about both NPE and KVRT); probably will bore most to tears but at least they will be equally short.But one thing I need to point out is that this malware, as also will be the case in a similar one that will be used is that on normal use they will be essentially invisible to the user. They reside in a Hidden System directory (so no joy when checking with a file manager), they persist via Scheduled Tasks (so avoiding Startup mangers that just look at registry entries), and will only be active during the pulse transmission out to malware command, so are far too ephemeral for noting in Task manager.Stuff like these make me question the &quot;I haven&#039;t been infected for years&quot; comments, because one really never knows, do one?</blockquote>

[QUOTE="cruelsister, post: 1072577, member: 7463"] If by that you mean if Kaspersky real time was installed, then there would have been no infection as K would have detected the original malware and deleted it. As for other AV's the detection rate is spotty (and could be made more so by manipulation of the original, making it close to zero-day). As to other 2nd opinion scanners, next week will be the same versus NPE (actually this video is part 1 of a 4 part series- next NPE, then Fun Facts about both NPE and KVRT); probably will bore most to tears but at least they will be equally short. But one thing I need to point out is that this malware, as also will be the case in a similar one that will be used is that on normal use they will be essentially invisible to the user. They reside in a Hidden System directory (so no joy when checking with a file manager), they persist via Scheduled Tasks (so avoiding Startup mangers that just look at registry entries), and will only be active during the pulse transmission out to malware command, so are far too ephemeral for noting in Task manager. Stuff like these make me question the "I haven't been infected for years" comments, because one really never knows, do one? [/QUOTE]

Verification