Fraud AV (ThinkPoint) not detected by Mbam

  • Thread starter Thread starter Virus Guy
  • Start date Start date
Resident said:
One of my customers just got the Thinkpoint trojan and I removed
it in ten minutes using system restore.
Click to expand...

And you would have trusted that your system restore was not equally
comprimized - exactly how?
 
NAV 2002?

Bahahahaha! We're nearly in 2011 now.

Nortons was crap at the best of times.

Thanks for the good laugh.
Click to expand...

By running Symantec's "Intelligent Installer", I'm able to use NAV 2002
as an on-demand scanner that is just as competent as the most current
version of any Symantec / Norton product. The Intelligent Updater is a
rather large definition package (it's running about 95 mb these days)
and it contains malware definitions for several different symantec
products.

So regardless of what you think about Symantec's malware-detection
capabilities as far as simple file-scanning goes, it makes me laugh that
only 13 out of 43 malware-detection products (on Virus Total) actually
did flag the file as suspect. And Kaspersky was not one of them.

And neither did Mbam detect the file in question.
 
Virus Guy said:
By running Symantec's "Intelligent Installer", I'm able to use NAV 2002
as an on-demand scanner that is just as competent as the most current
version of any Symantec / Norton product. The Intelligent Updater is a
rather large definition package (it's running about 95 mb these days)
and it contains malware definitions for several different symantec
products.

So regardless of what you think about Symantec's malware-detection
capabilities as far as simple file-scanning goes, it makes me laugh that
only 13 out of 43 malware-detection products (on Virus Total) actually
did flag the file as suspect. And Kaspersky was not one of them.

And neither did Mbam detect the file in question.
Click to expand...

This one I just found scores low too.

I scanned with MBAM, ClamWin, and AntiVir free versions. Not detected.

http://www.virustotal.com/file-scan...45c2001ec570d4ac8e56a2398d643a5170-1291340484

Again, it is the way I got it that makes it suspicious.
 
Back
Top