Maher's Digital World

Off Topic Discussion => Chit Chat => Topic started by: aa1234779 on April 03, 2013, 02:43 AM

Title: False positives that aren't so false?
Post by: aa1234779 on April 03, 2013, 02:43 AM
Many of the supposed false positives are not false. After a lot of experimenting, a number of the false positives I've come across were real threats that these
release ppls keep telling others to ignore & to turn of real-time protection or other non-sense to fool them into buying the bs. Yes, not all are real threats but it's a fact imo that
some seek through this scheme to gain profits by unethically installing ad-ware & other malware on downloaders' machines to steal financial & personal info of these unsuspecting masses.


How do the experts around here differentiate between positives & false positives when it comes to downloading software
Title: Re: False positives that aren't so false?
Post by: Shadow.97 on April 03, 2013, 05:54 PM
Quote from: aa1234779 on April 03, 2013, 02:43 AM
Many of the supposed false positives are not false. After a lot of experimenting, a number of the false positives I've come across were real threats that these
release ppls keep telling others to ignore & to turn of real-time protection or other non-sense to fool them into buying the bs. Yes, not all are real threats but it's a fact imo that
some seek through this scheme to gain profits by unethically installing ad-ware & other malware on downloaders' machines to steal financial & personal info of these unsuspecting masses.


How do the experts around here differentiate between positives & false positives when it comes to downloading software
Cheats for games, any game injection basically is detected. (Except the big/famous ones)
Title: Re: False positives that aren't so false?
Post by: humbert on April 04, 2013, 01:36 AM
I use a rule of thumb that so far has never failed.  I know everyone has a favorite antivirus, and mine is Windows Defender, previously MS Security Essentials. I have it set to tell me what to do if it ever catches something out of the ordinary. When that happens I always click for details. It then tells me the file with the problem and the nature of the problem. If it says something like "keygen" or "hacktool", I leave it alone. I delete it when it gives you the name of a known virus with all the info and warns of severe damage.

As I see it, you can't simply delete or permit anything unless you first see what it's about. I do the same thing regardless of where the file came from.
Title: Re: False positives that aren't so false?
Post by: Daniil on April 05, 2013, 01:13 PM
I'm very ascetic with software, and most of soft, used by me, is freeware/GNU. If I need to download and start strange program, never used by me before - I start it on Virtual Machine. If it's a virus - not a problem, delete the VM virtual disc, and copy new from backup dir.
Also, on my workstation I have well-tuned antivirus. So, on my workstation lives only viruses which is written by me. :)
Title: Re: False positives that aren't so false?
Post by: aa1234779 on April 05, 2013, 02:00 PM
Quote from: Shadow.97 on April 03, 2013, 05:54 PM
Cheats for games, any game injection basically is detected. (Except the big/famous ones)
Can u explain? I didn't get what u meant.

Quote from: humbert on April 04, 2013, 01:36 AM
I use a rule of thumb that so far has never failed.  I know everyone has a favorite antivirus, and mine is Windows Defender, previously MS Security Essentials. I have it set to tell me what to do if it ever catches something out of the ordinary. When that happens I always click for details. It then tells me the file with the problem and the nature of the problem. If it says something like "keygen" or "hacktool", I leave it alone. I delete it when it gives you the name of a known virus with all the info and warns of severe damage.

As I see it, you can't simply delete or permit anything unless you first see what it's about. I do the same thing regardless of where the file came from.

Awesome!

Quote from: Daniil on April 05, 2013, 01:13 PM
I'm very ascetic with software, and most of soft, used by me, is freeware/GNU. If I need to download and start strange program, never used by me before - I start it on Virtual Machine. If it's a virus - not a problem, delete the VM virtual disc, and copy new from backup dir.
Also, on my workstation I have well-tuned antivirus. So, on my workstation lives only viruses which is written by me. :)
Great..
Is there simple tutorial to the latest or best version of Virtual Machine & do I create the image files or are they also downloadable?

Thank you all for the posts.
Title: Re: False positives that aren't so false?
Post by: Daniil on April 05, 2013, 02:24 PM
Any VM have a good tutorials on their sites or in documentations.
Try to use Sun(Oracle) VirtualBox.
To make an image, you should just create a virtual machine, install a Windows in it, and copy VM's virtual HDD (which is a file in fact) somewhere. Copied file will be your backup image. "Restore" operation length is about a minute. :)
Title: Re: False positives that aren't so false?
Post by: humbert on April 05, 2013, 10:04 PM
Quote from: Daniil on April 05, 2013, 02:24 PM
Any VM have a good tutorials on their sites or in documentations.
Try to use Sun(Oracle) VirtualBox.
To make an image, you should just create a virtual machine, install a Windows in it, and copy VM's virtual HDD (which is a file in fact) somewhere. Copied file will be your backup image. "Restore" operation length is about a minute. :)

In your opinion would you say Oracle's VirtualBox is better than VMware for simply testing stuff in an environment that can't harm your setup? I asking because I've never used a virtual machine and I think I should at least how to.