Reply to thread

Message

<blockquote data-quote="cruelsister" data-source="post: 997694" data-attributes="member: 7463">One must always be careful of guides such as the one you cited. Often the author may be conversant with with forms of defense against malware without really understanding malware itself. For example quoting from the article:&quot;To see the Digital Signatures of a file, right click on a file, choose Properties, then Digital Signature tab. This reveals the company that signed the file. Then click on the Name of Signer, then Details button. It should say &quot;This digital signature is OK&quot;. If it does not say that, then the file has been modified - discard it. Check that the signature is signed by the correct company name. This also is a guarentee that the file has not been modified.The Edge browser has SmartScreen. It is a reputation checker. SmartScreen looks at many things and it revokes trust when a download has done bad things on a user&#039;s computer. So if the file has a signature, it can revoke trust of anything signed with that signature if the signature has a bad reputation..&quot;The corollary to this statement then is that a file that states &quot;This digital signature is OK&quot; would be fine to run. However this is far, far from the case. As an example, please see something in this video (just a few seconds at the 0:40 point):[MEDIA=youtube]Wl4roQH7UxI:54[/MEDIA]Also this particular file (among many others) is totally ignored by something else that this article suggests: &quot;Turn UAC to the max&quot;. Perhaps at one time this was helpful, but I assure you that this is no longer the case.</blockquote>

[QUOTE="cruelsister, post: 997694, member: 7463"] One must always be careful of guides such as the one you cited. Often the author may be conversant with with forms of defense against malware without really understanding malware itself. For example quoting from the article: "To see the Digital Signatures of a file, right click on a file, choose Properties, then Digital Signature tab. This reveals the company that signed the file. Then click on the Name of Signer, then Details button. It should say "This digital signature is OK". If it does not say that, then the file has been modified - discard it. Check that the signature is signed by the correct company name. This also is a guarentee that the file has not been modified. The Edge browser has SmartScreen. It is a reputation checker. SmartScreen looks at many things and it revokes trust when a download has done bad things on a user's computer. So if the file has a signature, it can revoke trust of anything signed with that signature if the signature has a bad reputation.." The corollary to this statement then is that a file that states "This digital signature is OK" would be fine to run. However this is far, far from the case. As an example, please see something in this video (just a few seconds at the 0:40 point): [MEDIA=youtube]Wl4roQH7UxI:54[/MEDIA] Also this particular file (among many others) is totally ignored by something else that this article suggests: "Turn UAC to the max". Perhaps at one time this was helpful, but I assure you that this is no longer the case. [/QUOTE]

Verification