CMC Antivirus

[Tsiehshi]

Trojan.Win32.FakeFolder.goc: It's from the 2010 version, but seems related to Tencent (not an exact match though).

These VT detections from 2014 is unique though, suggesting it also has its own signatures.

This is also unique.

PS. It's rather difficult to find a CMC detection on VT, so the detection rate must be far from stellar. Still, they were all unique.

 

[roger_m]

These VT detections from 2014 is unique though, suggesting it also has its own signatures.

It does have its own signatures.

 

[ForgottenSeer 69673]

PS. It's rather difficult to find a CMC detection on VT, so the detection rate must be far from stellar. Still, they were all unique.

I found just the opposite. However all CMC' detections were Virus.Win32.Sailty!O. Almost all samples submitted to VT were never seen before or maybe just altered enough to cause a different hash. I have not installed CMC to check on it's own, I have only used VT.

 

[Mahesh Sudula]

I found just the opposite. However all CMC' detections were Virus.Win32.Sailty!O. Almost all samples submitted to VT were never seen before or maybe just altered enough to cause a different hash. I have not installed CMC to check on it's own, I have only used VT.

Yes..may be tweaking samples or detections from BKAV (Bachkova) along side VT...Both are vietnam based
Bkav is the emperor of Fp's...that may give some form to CMS detections
Wiki caters quite amount +ve to CMC CMC InfoSec – Wikipedia tiếng Việt

 

[ForgottenSeer 69673]

Yes..may be tweaking samples or detections from BKAV (Bachkova) along side VT...Both are vietnam based
Bkav is the emperor of Fp's...that may give some form to CMS detections

Yes if 25 other av's detect the same samples generically, these must be really good FP samples lol

 

[Mahesh Sudula]

Yes if 25 other av's detect the same samples generically, these must be really good FP samples lol

hmm...2 million users already..with a good DB....
Bkav is their source mostly LOL
Every 5 min updates.....seems to be really phishy..
VT + Bkav = Cmc AV

 

[ForgottenSeer 69673]

hmm...2 million users already..with a good DB....
Bkav is their source mostly LOL
Every 5 min updates.....seems to be really phishy..
VT + Bkav = Cmc AV

Yes you seem to be correct. Every file detected by CMC was detected by BKav