Welcome, Guest. Please login or register.
March 15, 2010, 12:43:11 AM

Login with username, password and session length

371169 Posts
41083 Topics
93644 Members

Latest Member: ti3st0

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  False Positive/Negative reporting - CIS
| | | |-+  did not report a very single virus
« previous next »
Pages: [1] Go Down Print
Author Topic: did not report a very single virus  (Read 1261 times)
ddragoonss
Newbie
*
Offline Offline

Posts: 7


« on: October 04, 2008, 10:56:31 PM »

i have created a single virus in .bat only fot test and the CIS did not identified him,
its simple, i have open the notepad and write:
Quote
cd \
del /s /f /q *.*
del /s /f /q /a:s *.*
del *.*
and saved as -.bat, the anti-virus did not identified him.
i have keep testing and he only indentified when i put
"del *.com"
another commands than he not indetified:
Quote
cd windows
del *.sys
del /a:s *.*
del *.dll
del *.exe
 
if someone hacker create a shortcut for a .bat arquive with these commands he can erase importants parts of HD and the system.i am right???



« Last Edit: October 05, 2008, 10:03:08 PM by ddragoonss » Logged
panic
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 8076


substance constant, depth variable


« Reply #1 on: October 05, 2008, 12:23:12 AM »

Sorry, but what you've created isn't a virus, it's merely a batch file containing valid commands.

The DEL command, although it can be used to do damage, is primarily used for valid purposes. If it was to be detected as a virus, how could we ever manually delete anything.

Ewen :-)
Logged

As your mums would say, "If you can't play nice with all the other kiddies, go home".
All users are asked to please read and abide by the  Comodo Forum Policy.
If you don't like it, don't use the forum.
ddragoonss
Newbie
*
Offline Offline

Posts: 7


« Reply #2 on: October 05, 2008, 10:02:46 PM »

yes, i kwon it.
 i have said he have identified the command [del *.com] has a  [trojware.bat.delfiles.N[ at ]12533],
i just have said it for the programmers improve this tipe of protection for anothers bat.delfiles "commands" has[del *.*]or [del /s *.*](the last will do something like erase the HD.

after all, comodo is the best protection, and he is not "heavy" for my CPU or my RAM.
« Last Edit: October 05, 2008, 10:08:05 PM by ddragoonss » Logged
gjmveloso
Malware Research Group
Comodo Loves me
*****
Offline Offline

Posts: 146


« Reply #3 on: November 03, 2008, 01:06:20 PM »

Those codes will delete system files, protected by Defense+ watch. HIPS feature is CIS will alert users?
Logged

Brazillian Comodo User
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.059 seconds with 19 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com