Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
FortiClient 6.0.0 (Windows)
Message
<blockquote data-quote="cruelsister" data-source="post: 740804" data-attributes="member: 7463"><p>As FC6 is now public, I did a quick dance with it. The AV definitions are OK, but nothing special. For example, this Blackswap banking trojan that's been out for a month: <a href="https://www.virustotal.com/en/file/5349a0c06823fa285faa31381b5566b2a3d8990f6a5b6775288471caa35f8516/analysis/1528325243/" target="_blank">Antivirus scan for 5349a0c06823fa285faa31381b5566b2a3d8990f6a5b6775288471caa35f8516 at 2018-06-06 22:47:23 UTC - VirusTotal</a></p><p></p><p>The system was infected and the malware persists on reboot and was not detected after a Full scan. FC6 also was oblivious to previously Forked processes and their vectors.</p><p></p><p>It surprised me that it was good at detecting worms with nastier persistence mechanisms; it also surprised me that it allowed a drop and autostart of a slightly modified AlphaCrypt. Finally it did not do well at all against newly coded KillDisk (not that it should, as it is a traditional AV).</p></blockquote><p></p>
[QUOTE="cruelsister, post: 740804, member: 7463"] As FC6 is now public, I did a quick dance with it. The AV definitions are OK, but nothing special. For example, this Blackswap banking trojan that's been out for a month: [URL="https://www.virustotal.com/en/file/5349a0c06823fa285faa31381b5566b2a3d8990f6a5b6775288471caa35f8516/analysis/1528325243/"]Antivirus scan for 5349a0c06823fa285faa31381b5566b2a3d8990f6a5b6775288471caa35f8516 at 2018-06-06 22:47:23 UTC - VirusTotal[/URL] The system was infected and the malware persists on reboot and was not detected after a Full scan. FC6 also was oblivious to previously Forked processes and their vectors. It surprised me that it was good at detecting worms with nastier persistence mechanisms; it also surprised me that it allowed a drop and autostart of a slightly modified AlphaCrypt. Finally it did not do well at all against newly coded KillDisk (not that it should, as it is a traditional AV). [/QUOTE]
Insert quotes…
Verification
Post reply
Top