Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 1041775" data-attributes="member: 62850">A few observations...1) Katya is a happy clicker2) Dell knows better than to not sign their binaries3) The false positive must be 14947493-d26c-4efb-9a9a-17fb2e10fcf0, because the others are provably malicious, whereas this just looked like a Dell utility doing its thingAlthough it was kind of tricky because of this...[URL unfurl=&quot;true&quot;]https://vuldb.com/?id.183518[/URL]And as I say, once a vulnerable process, always a vulnerable process <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />.I think 5 years we will look back and say... &quot;can you believe we used to allow unknown executable code to automatically run, and we would only intervene if we thought it stepped out of line&quot;.And people wonder why the malware crisis is bad as it is.Great post Trident!</blockquote>

[QUOTE="danb, post: 1041775, member: 62850"] A few observations... 1) Katya is a happy clicker 2) Dell knows better than to not sign their binaries 3) The false positive must be 14947493-d26c-4efb-9a9a-17fb2e10fcf0, because the others are provably malicious, whereas this just looked like a Dell utility doing its thing Although it was kind of tricky because of this... [URL unfurl="true"]https://vuldb.com/?id.183518[/URL] And as I say, once a vulnerable process, always a vulnerable process ;). I think 5 years we will look back and say... "can you believe we used to allow unknown executable code to automatically run, and we would only intervene if we thought it stepped out of line". And people wonder why the malware crisis is bad as it is. Great post Trident! [/QUOTE]

Verification