Trojan Question

Losing_grip · Post by **Losing_grip** » 07 Aug 2007, 17:36

Ok , so the trojan server is Fully undetected by any anti-virus and also anti-sandbox detection... now how on earth would i know if the file is trojan without opening that file? is there any other method?

thanks.

PopPooB · Post by **PopPooB** » 07 Aug 2007, 18:07

evidently not unless you wanna go through rigorous testing and have a vast knowledge of encryption and coding

zero963 · Post by **zero963** » 09 Aug 2007, 23:18

you say undetected, but how many anti virus software have you tried.
try at least five other anti virus software and than hijackthis.
the trick is thurale ones a month test.

Losing_grip · Post by **Losing_grip** » 10 Aug 2007, 04:03

zero963 wrote:you say undetected, but how many anti virus software have you tried.
try at least five other anti virus software and than hijackthis.
the trick is thurale ones a month test.

32 anti-virus www.virustotal.com
It is undetectable at runtime and scantime...

Does hijackthis scan a certain file? i think not. =/

mrmike · Post by **mrmike** » 10 Aug 2007, 04:25

R O F L ! you upload your trojan to a securrity website????

roflrofl...

Losing_grip · Post by **Losing_grip** » 10 Aug 2007, 07:39

mrmike wrote:R O F L ! you upload your trojan to a securrity website???? roflrofl...

Yup , but there is "Do not distribute the sample" which means in case the file is suspicious of being malware they will not distribute it to antivirus companies.

mrmike · Post by **mrmike** » 10 Aug 2007, 07:39

Losing_grip wrote:
mrmike wrote:R O F L ! you upload your trojan to a securrity website???? roflrofl...

Yup , but there is "Do not distribute the sample" which means in case the file is suspicious of being malware we will not distribute it to antivirus companies.

a okay... then hope that you can trust them..

Losing_grip · Post by **Losing_grip** » 10 Aug 2007, 08:12

mrmike wrote:
Losing_grip wrote:
mrmike wrote:R O F L ! you upload your trojan to a securrity website???? roflrofl...

Yup , but there is "Do not distribute the sample" which means in case the file is suspicious of being malware we will not distribute it to antivirus companies.
a okay... then hope that you can trust them..

People who have FUD botnet , troj, or what so ever have been scanning their files to virustotal and until now they're UD. so i dont think they're distributing 'em.

Lyecdevf · Post by **Lyecdevf** » 10 Aug 2007, 10:38

If the virus malware has been writen by some hacker and is completlly new no AV will recognize the signature hence it will not detect it. However, if you zone alarm AV that also monitors programs than it would pick it up because it would recognize that the program is trying to do some thing that a spyware would do. You need some program that monitors all exe files that gives you information on what they are doing.

Losing_grip · Post by **Losing_grip** » 10 Aug 2007, 10:41

Lyecdevf wrote:If the virus malware has been writen by some hacker and is completlly new no AV will recognize the signature hence it will not detect it. However, if you zone alarm AV that also monitors programs than it would pick it up because it would recognize that the program is trying to do some thing that a spyware would do. You need some program that monitors all exe files that gives you information on what they are doing.

And that program is?...

Lyecdevf · Post by **Lyecdevf** » 10 Aug 2007, 10:48

Like I have said that it is already integrated in ZoneAlarm just like the firewall is and it the best AV if you were to ask me. However, there is a stand alone aplication called cyberhalk which monitors all exe.