[GET] Ecover Creator Software PC Only

[firas14]

Thanks Nancy but looks like it is not a safe software:

SHA256: cdc10dce2e09e2fda639847269c230e238a91d01086fc061f3369ad93e1a9887
File name: E-Cover Creator PC Only.zip
Detection ratio: 8 / 58
Analysis date: 2017-05-03 13:59:39 UTC ( 0 minutes ago )

https://virustotal.com/en/file/cdc10dce2...493819979/

Best

[Nancy857]

Thank you. I have no clue how to do a 'virus' thing.

[Lumos]

I carefully read and examined every tab and detail of the VT report and re-submitted the EXE file as well.

With VT it is kind of important to have an idea of what you're looking at to weed out false positives correctly.

These AV apps are practically unknown or very new in the larger scheme of things:
Antiy-AVL, Jiangmin, TheHacker.
These 2 are basically useless placebo things:
Kingsoft, Yandex.
These two just plain old suck:
Symantec, TrendMicro-HouseCall.

Additionally - this is 100% meaningless: VIRUS_UNKNOWN
And lastly - whenever an AV says only some variation of 'TROJAN GEN'
It can usually be dismissed as gibberish.

I also scanned it locally with 3 competent products and all came up with no threats detected.
My conclusion is that since all the well reputed AV's at VT came up with nothing and only useless ones reported nebulous, non-specific gibberish - that it is more likely clean than otherwise.

Just my 2 cents though - if anyone sees or finds different, please add that info here ??

Thanks.

[digital001]

Thanks for the lovely share Nancy...repped

[layna61524]

@smithnowt: (Hey there!) I read your synopsis of the anti-virus analysis with keen interest. I'd like to use your way of seeing things in the future when trying to decide which programs to keep and which to delete.

It's scary enough understanding the gibberish some of these A-V programs serve up so having a general gauge is very useful: unless the A-V programs are known and trusted ones, we can (fairly) safely ignore the lesser known ones.

After all, we're into B-H activities so the potentially unknown program (PUP) will show up ... and for all intents and purposes, we know what those are --- or at least, supposed to be.

You just made my life a lot easier! Thanks for your input. And, like you suggest, if someone can add anything to better enlighten us, that's always welcomed.


Layna61524

[Lumos]

Hi Layna61524 and thanks for your kind thoughts.

The best tool I use on any program installer is Universal Extractor.
It will decompress about 90% of all installables so that it is possible to see their contents as well as what things may not belong there.
The secondary advantage of this can also be for programs to be more or less made usable as 'green' or portable rather than having to be installed at all.

In the case of PUPs, once a good look is taken of a program's contents, they are usually found in a sub-folder of their own and easily deleted along with the excess of installer stuff.

The real worries in malware right now are whatever clever vectors are dreamed up by the cybercriminals making ransomwares and/or rootkits.

Most AV apps are hard pressed to keep up with all the new daily 'threats' - and the sorts of trash which may infest patched apps or KGs is usually quite old and easily detected by a good, installed AV app (I.E - not symantec, mcafee or other krapware that doesn't work).

Lastly - it is important to look 1st for a clearly defined naming (like NOT 'trojan gen !!), then follow that up with a general search to see what it may be if it does look concerning.
This is the best method to avoid FPs.

[The Saint]

Thank you Nancy. Will check it out later. Looks interesting and useful.

[Ice Glass]

Found the download page. Go here - https://bestblackhatforum.com/Thread-Eco...ftware-Pro

[COOL CLASS]

Can I get new link to download this?

[Ice Glass]

(06-02-2020 12:12 PM)COOL CLASS Wrote:  Can I get new link to download this?

Here https://bestblackhatforum.com/Thread-Eco...ftware-Pro