Re: Bad Antivirus

Hi,

I do not think that you installed some bad av. sality seems to be a
very well implemented malware and has the ability of getting into exe
files. Have you considered reading the wikipedia article on that?

http://en.wikipedia.org/wiki/Sality

there are maybe some parts of this malware still on your system, like
registry entries etc. I experienced different malware infections which
all couldn't be found by different av's only. every time i had to
detect many other registry entries and files by myself.

but i would also propose to check the exe files you told us inside of
a sandbox. are you familiar with microsofts sysinternals suite? if not
just give it a chance in detecting what this malware is still doing:

http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx

good luck :-)
andré

2013/1/29  <[email protected]>:
> Dear folks,
>
> I have 3 W2K3 servers, each are running same software binary exe files. One month ago, they infected with some rootkits and viruses which later on I know from antivirus detection this malware called sality, ipz, etc.
> After installing a new antivirus and revealed the malware, some of my software seems not running as expected. At the moment, I suspect that the malware still there because the AV may not capable to clean them all. I tried using 3 or 4 most popular AV, but all were claimed the servers are clean while my software couldn't run smoothly. In fact, some of exe files has been changed in size while I am not sure whether this changed made by viruses or 'bad' AV I just installed.
> If I try to proof that my exe files has been changed by this 'bad' AV, does anyone know how to proof this things ? By reversing this exe files, is it possible to get which part of the files has changed ?
>
> Thank's
>
> Ibha ID
> Sent from my BlackBerry® smartphone from Sinyal Bagus XL, Nyambung Teruuusss...!

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------