Memaksimalkan Antivirus (McAfee)

Beberapa hari yang lalu saya menemukan beberapa file "mencurigakan" di flashdisk teman
dan saya curiga jangan-jangan ini virus.

Saya coba scan dengan antivirus favorit yaitu mcafee (update terbaru)
dan hasilnya mengecewakan... virusnya belum dikenali.

Berdasarkan dari info teman, contoh file itu saya coba kirim ke mcafee via website

https://www.webimmune.net/default.asp (menggunakan user & pass login dari teman)

dan hasilnya diluar dugaan, saya dikirimkan sebuah file EXTRA.DAT

saya langsung download dan mengikuti petunjuk yang diberikan,
setelah selesai, saya langsung scan file yang saya curigai
dan hasilnya virusnya dapat dikenali dengan baik.

Begitu saya konfirmasikan ke teman (yang punya user & pass), teman bilang memang begitu
bahkan saya diajarkan cara menggabung beberapa file EXTRA.DAT yang berbeda

berikut caranya :
misalkan ada 3 file extra.dat dari 3 contoh virus yang berbeda
-rename jadi extra1.dat extra2.dat extra3.dat
-buat file bat dan gunakan perintah COPY /B yaitu :

COPY /B "EXTRA1.DAT" + "EXTRA2.DAT" + "EXTRA3.DAT" "EXTRA.DAT"

-akan tercipta file EXTRA.DAT (yang merupakan gabungan 3 extra.dat sebelumnya)
-copykan file EXTRA.DAT sesuai petunjuk dari mcafee









dari gambar terlihat extra.dat sudah diload dengan 4 jenis virus
dan McAfee siap untuk "beraksi kembali".........

Notes : bantu mcafee mendeteksi virus-virus baru dengan mengirimkan contoh virus ke mereka
https://www.webimmune.net/default.asp
registrasi user dan password dulu dijamin GRATIS


(berikut email dari mcafee)
-----------------------------------------------------------------------------------------

From: virus_research@avertlabs.com
To: xxxxxxxx@yahoo.com
File attachments : EXTRA.DAT (2180b)

Avert™ Sample Analysis Issue Number: 5445484
Virus Researcher: Arjun Mani
McAfee Avert™ Labs, Bangalore, India
Identified: Generic.TRA

Thank you for submitting your suspicious file.

Synopsis -

virus.exe
-Attached is a file for extra detection, which will be included in a future DAT set.

EXTRA.DAT
The file should be copied into the directory where the other DAT files reside
(with default installation, C:\Program Files\Common Files\McAfee\Engine).
Otherwise, use the find/search utility on your computer search to for the following file:
McScan32.dll
Then copy the Extra.dat we have sent you to the same folder where one of the above is located.
Once you have copied the file, reboot the system for the driver to be loaded.
Further information about Extra.DATs can be found at http://vil.mcafeesecurity.com/vil/systemhelpdocs/extradat.aspx.

Solution -
To ensure that you have the maximum available capability of detecting and cleaning this malware on your system, please make sure you have the latest engine.

DAT updates are available at: http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Support -
Virus Research accepts file-samples for analysis and possible inclusion into AV signature DAT sets. We are also prepared to answer general virus questions.
All product-related questions and comments can be addressed through technical support and customer service, including:
* Product installation and update questions
* Product usage questions
* Specific operating system/version questions
* Assistance with detection and cleaning or removal of viruses or trojans

Please use the following link to reach our technical support group for McAfee products.
Corporate Customers:


Single User/Retail Customers:


Regards,
Arjun Mani
McAfee® Avert® Labs
A division of McAfee, Inc.
--------------------------
McAfee® Avert® Labs Blog
AudioParasitics - The Official PodCast of McAfee® Avert® Labs
--------------------------