The Biggest Threat This Year!

Corrupted user

The Biggest threat this year turns out to be Portable Applications and the programs used to make them!

Modified copies of THINSTALL are being downloaded from all the Torrent portals and NO MAJOR Antivirus Publisher is paying attention!

Bitdefender does not see a threat with modified copies of THINSTALL and Kaspersky simply removed my posts and banned me from reporting the threat!

Modified copies of THINSTALL can disable your firewall, freeze your computer untill its damage is done and pretends to be "ANY" of your trusted applications accessing the Internet!

Your firewall might ask you if you wish your trusted program to access the Internet again, but by checking where your trusted application is going, you can see that its really the modified copy of THINSTALL that is accessing the Network!

If you doubt me that this is the biggest threat of the year and is about to go SuperNova, then research Thinstall and/or the portable applications made with it...

If you still dont see a problem, then YOU are the Problem!!!

alexcrist

Chill out, Corrupted. You want to report the, and I quote, Biggest threat this year, but you didn't even give a link to that application...

If you want to make a correct report, please put the file(s) that you suspect in a ZIP file, protected by the password infected, and attach the ZIP to your next post. Otherwise...as least post a link where the BD Virus Analysts can take a sample. Nobody can do anything without a sample.

----------------------------------------------------------------------------------------------------

Because you made me curious about this, I searched it on Google. As it appears, it's a legit application (but I'm not a Virus Analyst...if there's something wrong with it, only the Virus Analysts can tell).

As I said, it looks like a legit application, and you seem to agree with me (I quote: "Modified copies of THINSTALL can disable your firewall, ..."). From the previous quote, I understand that you agree that only modified versions of Thinstall could be threats and NOT the actual Thinstall.

This situation is extremely similar with the packers' situation: packers are very useful tools, when you (as a developer) want your application to be smaller, and to be protected by viruses. But nobody stops the virus-creators to use packers to crypt the virus code. And so, many people started to think that packers are actually viruses (because packed viruses are harder to detect).

In other words: if you want BD to detect modified versions of Thinstall, you have to provide such a modified version, so it can be analyzed.

Cris.

P.S.: I'll mode this topic to a more appropriate section.