Reply to thread

Message

<blockquote data-quote="vitao" data-source="post: 1111431" data-attributes="member: 109212">i understand what youre saying but its hard to agree as the sample has this from others vendors: <a href="https://www.virustotal.com/gui/file/75d96dfe70912f3f2c5b669ebac010a83904daea9a908c5352063f1508d8ed58" target="_blank">VirusTotal</a>for now its 45/72. its a big &quot;wrong detection&quot; by many names. my argument just gains force. if its an file that download something bad but its not downloading anything anymore, thus cis do not detect it, so why not detect the connection try out? the file is there. you say that its a file that tries to download something from some remote server, but can you provide the ip for it? or where did you get this information?anyways, even if its right, what youre saying, still, cis should block it or atleast show some alert as the file is supose to try to connect to an unknow ip.edit.: just for clarification. the test is to show a problem. a file that is a malware and cis do not block nor detect it. as in every video showing this kind of thing with cis. and to have a point i show the results from virustotal and valkyrie itself. it really doesnt matter that much what kind of malware it is or if the server is down or not. what matters the most for users is that cis (and others) fail to prevent execution of an malware classified by many as a trojan. and thats the point. but its nice to hear yous explanations as i learn many good things and learn somethings not so good about many.</blockquote>

[QUOTE="vitao, post: 1111431, member: 109212"] i understand what youre saying but its hard to agree as the sample has this from others vendors: [URL='https://www.virustotal.com/gui/file/75d96dfe70912f3f2c5b669ebac010a83904daea9a908c5352063f1508d8ed58']VirusTotal[/URL] for now its 45/72. its a big "wrong detection" by many names. my argument just gains force. if its an file that download something bad but its not downloading anything anymore, thus cis do not detect it, so why not detect the connection try out? the file is there. you say that its a file that tries to download something from some remote server, but can you provide the ip for it? or where did you get this information? anyways, even if its right, what youre saying, still, cis should block it or atleast show some alert as the file is supose to try to connect to an unknow ip. edit.: just for clarification. the test is to show a problem. a file that is a malware and cis do not block nor detect it. as in every video showing this kind of thing with cis. and to have a point i show the results from virustotal and valkyrie itself. it really doesnt matter that much what kind of malware it is or if the server is down or not. what matters the most for users is that cis (and others) fail to prevent execution of an malware classified by many as a trojan. and thats the point. but its nice to hear yous explanations as i learn many good things and learn somethings not so good about many. [/QUOTE]

Verification