Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.computer.security > #5571 > unrolled thread

Infection

Started byGloops <gloops@zailes.invalid.org>
First post2015-12-26 04:50 +0100
Last post2015-12-26 21:50 +0100
Articles 3 — 2 participants

Back to article view | Back to alt.computer.security


Contents

  Infection Gloops <gloops@zailes.invalid.org> - 2015-12-26 04:50 +0100
    Re: Infection "David H. Lipman" <DLipman~nospam~@Verizon.Net> - 2015-12-26 08:06 -0500
      Re: Infection Gloops <gloops@zailes.invalid.org> - 2015-12-26 21:50 +0100

#5571 — Infection

FromGloops <gloops@zailes.invalid.org>
Date2015-12-26 04:50 +0100
SubjectInfection
Message-ID<n5l2qs$om0$1@usenet.pasdenom.info>
Hello everybody,

I have two symptoms of infections, either it is the same one, or two 
different infections.

1. 360 Total Security warns me about "HEUR/QVM06.2.Malware.Gen"
2. It has once warned me about one of my programs, and then not.

About "HEUR/QVM06.2.Malware.Gen", it has been cared ten days ago 
following this :
https://malwaretips.com/blogs/heur-malware-qvm05-gen-removal/#junkware

But in fact, three steps were OK, and then about HitmanPro, I had to 
stop it from the taskmgr after three hours, as the counter was blocked.

Today, 360 still warns me about "HEUR/QVM06.2.Malware.Gen" among other 
variants.

So, the continuity of the care was the same, except that when seeing the 
files counter stop at 130021 after about 10 minutes, I stopped it ten 
minutes later.

About the program about which allegedly (and presumably) its "Behavior 
approximates that of Trojans", I sent it to 360 support to know more 
about it, and proposed them to send the sources if needed. One precision 
: the program is 4 KB bigger and two years more recent than the one 
obtained from the environment development.

Well, has anybody any comments ?

[toc] | [next] | [standalone]


#5572

From"David H. Lipman" <DLipman~nospam~@Verizon.Net>
Date2015-12-26 08:06 -0500
Message-ID<n5m3d802o0b@news3.newsguy.com>
In reply to#5571
>> "Gloops"  wrote in message news:n5l2qs$om0$1@usenet.pasdenom.info... 
>> Hello everybody,
>>
>> I have two symptoms of infections, either it is the same one, or two 
>> different infections.
>>
>> 1. 360 Total Security warns me about "HEUR/QVM06.2.Malware.Gen"
>> 2. It has once warned me about one of my programs, and then not.
>>
>> About "HEUR/QVM06.2.Malware.Gen", it has been cared ten days ago 
>> following this :
>> https://malwaretips.com/blogs/heur-malware-qvm05-gen-removal/#junkware
>>
>> But in fact, three steps were OK, and then about HitmanPro, I had to stop 
>> it from the taskmgr after three hours, as the counter was blocked.
>>
>> Today, 360 still warns me about "HEUR/QVM06.2.Malware.Gen" among other 
>> variants.
>>
>> So, the continuity of the care was the same, except that when seeing the 
>> files counter stop at 130021 after about 10 minutes, I stopped it ten 
>> minutes later.

>> About the program about which allegedly (and presumably) its "Behavior 
>> approximates that of Trojans", I sent it to 360 support to know more 
>> about it, and proposed them to send the sources if needed. One precision 
>> : the program is 4 KB bigger and two years more recent than the one 
>> obtained from the environment development.
>>
>> Well, has anybody any comments ?

The article and MalwareTips is wrong.  Right from the start it states that 
it is a "specific detection".  It isn't.  The detection name starts with 
"HEUR" which means a Heuristic detection.  Heuristics are not specific 
detections they generalized non-signature detections.

I suggest you get 1-on-1 assistance through a trained malware removal forum 
helper at Malwarebytes.

https://forums.malwarebytes.org/index.php?/forum/7-malware-removal-help/


-- 
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp 

[toc] | [prev] | [next] | [standalone]


#5573

FromGloops <gloops@zailes.invalid.org>
Date2015-12-26 21:50 +0100
Message-ID<n5muin$r13$1@usenet.pasdenom.info>
In reply to#5572
Le 26/12/2015 14:06, David H. Lipman a écrit :
>>> "Gloops"  wrote in message news:n5l2qs$om0$1@usenet.pasdenom.info...
>>> Hello everybody,
>>>
>>> I have two symptoms of infections, either it is the same one, or two
>>> different infections.
>>>
>>> 1. 360 Total Security warns me about "HEUR/QVM06.2.Malware.Gen"
>>> 2. It has once warned me about one of my programs, and then not.
>>>
>>> About "HEUR/QVM06.2.Malware.Gen", it has been cared ten days ago
>>> following this :
>>> https://malwaretips.com/blogs/heur-malware-qvm05-gen-removal/#junkware
>>>
>>> But in fact, three steps were OK, and then about HitmanPro, I had to
>>> stop it from the taskmgr after three hours, as the counter was blocked.
>>>
>>> Today, 360 still warns me about "HEUR/QVM06.2.Malware.Gen" among
>>> other variants.
>>>
>>> So, the continuity of the care was the same, except that when seeing
>>> the files counter stop at 130021 after about 10 minutes, I stopped it
>>> ten minutes later.
>
>>> About the program about which allegedly (and presumably) its
>>> "Behavior approximates that of Trojans", I sent it to 360 support to
>>> know more about it, and proposed them to send the sources if needed.
>>> One precision : the program is 4 KB bigger and two years more recent
>>> than the one obtained from the environment development.
>>>
>>> Well, has anybody any comments ?
>
> The article and MalwareTips is wrong.  Right from the start it states
> that it is a "specific detection".  It isn't.  The detection name starts
> with "HEUR" which means a Heuristic detection.  Heuristics are not
> specific detections they generalized non-signature detections.
>
> I suggest you get 1-on-1 assistance through a trained malware removal
> forum helper at Malwarebytes.
>
> https://forums.malwarebytes.org/index.php?/forum/7-malware-removal-help/
>
>

OK, I sent them one file to 360 anyway.
Shall see on Monday, now, I presume.

Oh, you mean ask Malwarebytes also ?
Shall try that.

Thanks.

[toc] | [prev] | [standalone]


Back to top | Article view | alt.computer.security


csiph-web