Path: csiph.com!weretis.net!feeder4.news.weretis.net!feeder5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: Thomas 'PointedEars' Lahn <PointedEars@web.de>
Newsgroups: comp.lang.javascript
Subject: Re: This is a VIRUS - how does it works?
Date: Sun, 02 Apr 2017 14:31:08 +0200
Organization: PointedEars Software (PES)
Lines: 22
Message-ID: <2860008.aeNJFYEL58@PointedEars.de>
References: <qtupdcda9p594dvj6aos78nhg4kp2b493f@4ax.com> <obpbrk$d0i$1@news.albasani.net>
Reply-To: Thomas 'PointedEars' Lahn <cljs@PointedEars.de>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8Bit
X-Trace: solani.org 1491136269 1596 eJwFwYEBwDAEBMCV6nlkHCH2H6F3VBfvMKcbl9tBOI6U7UDmKiK/kLEza686bzWxmuwyzPsBFdARXA== (2 Apr 2017 12:31:09 GMT)
X-Complaints-To: abuse@news.solani.org
NNTP-Posting-Date: Sun, 2 Apr 2017 12:31:09 +0000 (UTC)
User-Agent: KNode/4.14.2
X-Face: %i>XG-yXR'\"2P/C_aO%~;2o~?g0pPKmbOw^=NT`tprDEf++D.m7"}HW6.#=U:?2GGctkL,f89@H46O$ASoW&?s}.k+&.<b';Md8`dH6iqhT)6C^.Px|[=M@7=Ik[_w<%n1Up"LPQNu2m8|L!/3iby{-]A+#YE}Kl{Cw$\U!kD%K}\2jz"QQP6Uqr],./"?;=4v
Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAGFBMVEXTxa4RFk5dUWANED8PFEfy7+MGBiW+n3ZNF/QuAAACaElEQVQ4jVXUwVOcMBQG8Dc7Rc4PUntdWV2uxjDpGaGeozOp1woar4jd5t/v9wLstMwsA/ntlxdCAgUc1hjTc9/JCZfGoo3wG3HdmdAWrIJRHe7GM/TmpY5VFefuVcAkkPbLIaN8rmPmjloyZxgyR3GuJ4K0AGtJ2htz8o7yqikm759fldQXaMpbDzjKAG+8v+AugVTOPO5DOjLvGtUYQwh0CPjnVMyGd+8/GfUB5nLKJDD2aLDh5HYyMDJGDwQIo2ZmZcKbowNmAdB/AzyFhrmF2MHRb0QJJfaAnwGB6orZhoykLzJtGwF/xpYxI1dswomiUj3gTuAIqCn/4C7cULwGNBtwMTk3Y4LfKB5YUaOKBKYtpplm7u0vip8tU1NWWyI/7XdcSuIDoMt6rVHMWT0DbjHPGqDqZVSa6zleLcUTcIKLoMv3ueJluALtAo9B302zPPlrtiVScRdCjXvVh3e3JpYa/jjkuC9N+LrBMlz/eAN4eQijX2EdLo6c5tGGHwLyHFtXk89dDGHwCVhG9T0S/j55AhRZgkMCmUQXJ49TnS1wnQDvw0eAh9ICeMmEFbCnPMFzjAvsWoEWEFdYEx+S0MoUZ1gT1wId8+AF3Bl2OoEu906AUHx5VLw/gXYg/x84loOah/2UYNrgiwSwGO7RfUzVBbx/kgpckumGOi6QirtD6gkLTitbnxNol47S2jVc2vsN5kPqaAHT8uUdAJM4v/DanjYOwmUjWznGfwB7sGtAtor5BgofDuzaRj4kSQAqDakTsKORa3Q3xKi3gE1fhl71KRMqrdZ2AWNNg/YOhQyrVBnb+i+nEg4bsDA+egAAAABJRU5ErkJggg==
Cancel-Lock: sha1:OBszcX4AOhyRTDPhL9E8b8MIeSc=
X-User-ID: eJwFwYEBwDAEBMCVXvGScRD2H6F3rhR2GJ3m68tQ0UuxV4rTMkXGoKh53/WFnbDGl8jmlsxb43yjmWEo/Dg3FU8=
X-NNTP-Posting-Host: eJwNxskBwCAIBMCWQBaM5awc/ZcQ5zVuoZEb4QEfHzRTv6VvxIVQ2BitlG4bPPtGszzrmHF+KRoR2Q==
Xref: csiph.com comp.lang.javascript:32903

Stefan Weiss wrote:

> Relevant for you: Avast did NOT detect the malware.

To be fair, they installed Avast only *after* they removed offending files 
and registry entries with SpyHunter …

> (Spyhunter is not an antivirus engine, and is not included in the list. 
> From what I've now read about it, you should probably get rid of it.)

… so that is a small point in favor of SpyHunter, and it says nothing about 
the capabilities of Avast.

Of course, installing an antivirus on an already compromised system can only 
help to determine the state of the system, but not reliably (false 
negatives).

-- 
PointedEars
FAQ: <http://PointedEars.de/faq> | <http://PointedEars.de/es-matrix>
<https://github.com/PointedEars> | <http://PointedEars.de/wsvn/>
Twitter: @PointedEars2 | Please do not cc me./Bitte keine Kopien per E-Mail.