Mindgems Folder Size - disk space analysis

[jackdorsey]

I recommend this awesome tool:
http://www.mindgems.com/products/Folder ... -Size.html

Here is the portable download page:
http://www.mindgems.com/products/Folder ... wnload.htm

[webfork]

This one is already in the database, though it didn't have an official entry so I'll just use this one.

[joby_toss]

@Wolfghost: https://www.virustotal.com/en/file/1f91 ... /analysis/

P.S. can't post this link in the comments section 'cause it contains the "virus" word.

[SYSTEM]

@Wolfghost: https://www.virustotal.com/en/file/1f91 ... /analysis/

P.S. can't post this link in the comments section 'cause it contains the "virus" word.

I'll add that F-Secure DeepGuard is very suspicious about new or rare files. See the DeepGuard white paper.

Prevalence rate check
DeepGuard includes a module that focuses on a file’s prevalence rate. Clean files typically have thousands or millions of users, making them highly prevalent. In contrast, malware samples are comparatively rare. According to statistics generated from F-Secure’s internal systems monitoring known threats, in a random sample of malicious programs found in the first four months of 2013, 99.7% of the threats were rarely seen in our user base. Rare or new files are automatically considered more suspect and subjected to greater scrutiny during the subsequent process monitoring stage.

[Wolfghost]

Huh............I dont understanding nothing anymore!!
I do a new test. Download from TPFC download directory and try to open the exe file with same result (Blocked by F-Secure that is up to date)
So I tested on VirusTotal with same SHA256 result, with same result by joby_toss............green like grass!?
I scanned the exe file manually with F-Secure and get this result: Suspicious:W32/Malware!Gemini

[joby_toss]

Send them the file for further analysis.

[Wolfghost]

@joby_toss:
I've done it

[I am Baas]

Huh............I dont understanding nothing anymore!!
I do a new test. Download from TPFC download directory and try to open the exe file with same result (Blocked by F-Secure that is up to date)
So I tested on VirusTotal with same SHA256 result, with same result by joby_toss............green like grass!?
I scanned the exe file manually with F-Secure and get this result: Suspicious:W32/Malware!Gemini

It's a Heuristic Detection.

[Wolfghost]

It's a Heuristic Detection.

Yea I know, but why it show green and clear In VirusTotal?

[joby_toss]

Maybe because DeepGuard is paranoid and folks over VirusTotal disabled it?