Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 1020346" data-attributes="member: 78686">Nice one <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />Looks like F-Secure is still blacklisting malware found on abuse ch <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />But I won&#039;t be so sure about system remaining infection free on this test. Specially on F-Secure&#039;s test, it looks infected with malware made persistent persistence via scheduled task which went unnoticed by F-Secure. If it&#039;s something like a data stealer, then data was already taken or will be taken at a later time.On Emsisoft&#039;s test, the malware in the download folder is a password stealer, as indicated by Kaspersky&#039;s signature name. Maybe Emsi stopped the malware and it&#039;s just a remnant. If that&#039;s the case then the system is safe.Kaspersky achieved a proper clean sheet, it seems.</blockquote>

[QUOTE="SeriousHoax, post: 1020346, member: 78686"] Nice one (y) Looks like F-Secure is still blacklisting malware found on abuse ch :unsure: But I won't be so sure about system remaining infection free on this test. Specially on F-Secure's test, it looks infected with malware made persistent persistence via scheduled task which went unnoticed by F-Secure. If it's something like a data stealer, then data was already taken or will be taken at a later time. On Emsisoft's test, the malware in the download folder is a password stealer, as indicated by Kaspersky's signature name. Maybe Emsi stopped the malware and it's just a remnant. If that's the case then the system is safe. Kaspersky achieved a proper clean sheet, it seems. [/QUOTE]

Verification