DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: Backdoor Malware  (Read 5,872 times)

beethoven

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 46
Backdoor Malware
« on: November 16, 2008, 01:07 AM »
I have been using Find and Run for a few years now and think it's a great program. I am not updating each time an update comes out, my experience is sometimes when things work for you, don't mess with them.
Still, I do come back regularly to see if I am missing something and eventually will look for the upgrade.

Just wondering why the current version shows us with some alerts on Jotti or Virustotal: Backdoor.XiaoBird.42 (paranoid heuristics) (probable variant) - I assume this is a FP but is this something that could be cleared up with VBA?

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,931
    • Gathering Badge
    • Plugin Coding Medal
    • Participated in NANY Challenge Seventeen Times
    • Cody Award
    • Coding Snacks
    • Volunteers/Staff
Re: Backdoor Malware
« Reply #1 on: November 16, 2008, 01:21 AM »
Quote
paranoid heuristics
thats a very good indicator that this is a false positive alarm -- i find those "advanced" heuristics to be totally worthless and harmful.

f0dder

  • [Well, THAT escalated quickly!]
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
    • Participated in NANY Challenge Once
Re: Backdoor Malware
« Reply #2 on: November 16, 2008, 04:40 AM »
Unfortunately, reliable virus detection is a very hard game. You want to be able to find the really nasty malware (which can be pretty darn tricky at hiding itself), but you also want to avoid false positives. False positives (like FARR being marked as "a virus") are bad - and it happens even with "Non-niche" software; lately, AVG flagged a critical windows component as a virus. If it can happen to something as high-volume as that, it can certainly happen to DonationCoder software as well >_<
- carpe noctem

Original address: https://www.donationcoder.com/forum/index.php?topic=15755.0