App Review Of Worms, USB Drives, and Qihoo

[cruelsister]

 

[reboot]

You never mentioned the name of the music track.

 

[Duotone]

Nice video @cruelsister disappointed that MBAM missed that one...

 

[WinXPert]

Nice video @cruelsister disappointed that Malwarebytes Anti-Malware missed that one...

Don't be. They are not interested in worms. Plus it's one big reason they are never ready to replace AVs.

Note: To date, I only knew 3 types of worms that they can detect based on actual PC disinfection. Sampo, Andromeda and a few strains of Ramnit. VBS worms gets pass them, unlike AVs today that catches them via behavior blocking.

 

[Duotone]

They are not interested in worms.

Theys should be as explained in www.cisco.com
"Viruses, worms, Trojans, and bots are all part of a class of software called malware."

Anyway i've stopped using MBAM recently as its not needed in my config.

 

[WinXPert]

Theys should be as explained in www.cisco.com
"Viruses, worms, Trojans, and bots are all part of a class of software called malware."

But they don't.

BTW, I use malware as a catch all term and worm to be a little specific.

Anyway i've stopped using Malwarebytes Anti-Malware recently as its not needed in my config.

ditto

 

[erreale]

You never mentioned the name of the music track.

The secret language of Angels - Lisa Gerrard -

 

[erreale]

Anyway i've stopped using Malwarebytes Anti-Malware recently as its not needed in my config.

ditto

Same here

 

[ng4ever]

Same here as well.

 

[Atlas147]

I use MCshield to check and disinfect all my USBs

 

[reboot]

The secret language of Angels - Lisa Gerrard -

Thanks erreale, that is very appreciated.

 

[Duotone]

I use MCshield to check and disinfect all my USBs

Switch to SMADAV... it way better

 

[Atlas147]

Switch to SMADAV... it way better

Any specific reason why? It looks more like a companion AV compared to MCshield being a AV specifically for USB malware (therefore the resource usage should be lower). Plus I already have Zemana AM as my companion AV

 

[Duotone]

Any specific reason why? It looks more like a companion AV compared to MCshield being a AV specifically for USB malware (therefore the resource usage should be lower). Plus I already have Zemana AM as my companion AV

Its only 1~2mb usasge, technically its both

Smadav is an additional protection (second layer) antivirus, and specialize in protecting USB Flash-disk to avoid virus infection.

It has much more features compared to MCshield you can read it in there site.

 

[amir 957]

Thanks for the test

 

[Thirio]

In the malware hub i notice that Qihoo is very often one of the first vendors to detect fresh malware on VirusTotal. If the file has 12/60 detection Qihoo is likely one of them.

 

[cruelsister]

About MCSield and SMADAV- although both products would protect, delete, and reverse damages from the worm, SMADAV has the added advantage(?) of disabling Windows Script Host by default.

 

[Duotone]

@cruelsister Thanks for confirming....

 

[Parsh]

In the malware hub i notice that Qihoo is very often one of the first vendors to detect fresh malware on VirusTotal. If the file has 12/60 detection Qihoo is likely one of them.

Qihoo has the benefit of early detection because of its AI thingy (though not exactly an AI).
That's why many a times you'll find it detect things that many others don't at that time. Not to be little it, it's quite good actually.
It does skip a few tough ones and its also seen raising an FP on good files quite a few times, that are rather flagged clean/undetected by other AVs on VT.

 

[Thirio]

Qihoo has the benefit of early detection because of its AI thingy (though not exactly an AI).
That's why many a times you'll find it detect things that many others don't at that time. Not to be little it, it's quite good actually.
It does skip a few tough ones and its also seen raising an FP on good files quite a few times, that are rather flagged clean/undetected by other AVs on VT.

For a free product it is indeed quite good. Their heuristics catch a lot of unknowns and they have a large user base. According to them they say they have "584 million users protected worldwide" on their homepage. Isn't that larger than Avast right now? And it looks like its keeping up with Kaspersky on the latest malware packs. For example here it beat Kaspersky as it doesn't have a signature for this file yet:
Antivirus scan for d6e70c166976fa31bd0cacaad4b69be8929309d9fc159f11759554c3392552d7 at 2017-03-14 13:51:42 UTC - VirusTotal

It's tempting for me to switch when I see good results like that.