Avast WEBforum

Other => Viruses and worms => Topic started by: apparle on July 17, 2009, 08:06:22 PM

Title: Virus not being detected
Post by: apparle on July 17, 2009, 08:06:22 PM
I found that a virus which was not detected by avast, many antivirus report it as virus on virustotal as well as jotti.
http://www.virustotal.com/analisis/1522b9934891baa644c4104971afc2a9878a3acb29f98f73b372995855270e41-1247633772
And its not a false positive because it tries to copy to my pendrive and creates an autorun.inf file and some exe files.

I put the virus in a 7zip compressed file with the password 'virus'
I did not use zip file as Gmail doesn't allow exe files in zip files.
Also I put the password in the email text.

But after 3 days (with latest updates) avast doesn't detect the virus.
Also the virus reporting link on the website is not available.
Has avast disabled this method.

Here is the file http://www.easy-share.com/1906800499/windows.7z
Should I send the email again??
Title: Re: Virus not being detected
Post by: DavidR on July 17, 2009, 09:08:50 PM
Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.
Title: Re: Virus not being detected
Post by: FreewheelinFrank on July 17, 2009, 10:44:25 PM
Viruses submitted to avast! are placed at the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of the Leopard' where they can do no harm.
Title: Re: Virus not being detected
Post by: DavidR on July 17, 2009, 11:14:24 PM
Those that aren't sent, don't even get that far.

So not sending them at means that they don't even get the chance some brave sole ignores the sign on the door.
Title: Re: Virus not being detected
Post by: Tarq57 on July 18, 2009, 01:36:44 AM
That's hilarious, FF.
Unfortunately it is sometimes true.
First time I emailed a virus I was surprised to actually get a reply of thanks, and it was added to the definitions. Quickly.
Last time was over a month ago. Reported on this forum. At least two of us sent it. Still not detected. :(
Title: Re: Virus not being detected
Post by: Juani Moreta on July 18, 2009, 01:45:33 AM
Im new using AVAST and I have this message everytime I use replay in PC. This the message: "Winnt3
Access violation at address 00404086 in module ‘winnt3.exe’. Read of address 6F6C7070".

Can somebody help me... Please  :)

Juani
Title: Re: Virus not being detected
Post by: FreewheelinFrank on July 18, 2009, 07:21:53 AM
That's hilarious, FF.
Unfortunately it is sometimes true.
First time I emailed a virus I was surprised to actually get a reply of thanks, and it was added to the definitions. Quickly.
Last time was over a month ago. Reported on this forum. At least two of us sent it. Still not detected. :(

I can't take credit for the hilarity.

It's a Douglas Adams quote.

 ;)

http://www.planetclaire.org/hitchhikers/ (http://www.planetclaire.org/hitchhikers/)
Title: Re: Virus not being detected
Post by: Tarq57 on July 18, 2009, 09:20:09 AM
Juani Moreta ,
Please start a new topic in the "avast home/pro" or "general" forum stating the problem.
You should include your operating system, including service pack, how long this has been going on, and what other security software has been installed/is installed now.
I'd certainly suggest doing a check disk, for starters.
Title: Re: Virus not being detected
Post by: Lisandro on July 18, 2009, 02:09:18 PM
Please, do not let the avast 5 development reduce, in any case, the protection of avast 4.
Complains about lack of detection is getting more frequent...
Title: Re: Virus not being detected
Post by: apparle on July 18, 2009, 02:16:07 PM
Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

To send the file via User Files section in Chest, should I make email settings like SMTP server etc or it will work directly
Title: Re: Virus not being detected
Post by: Lisandro on July 18, 2009, 03:20:40 PM
To send the file via User Files section in Chest, should I make email settings like SMTP server etc or it will work directly
I think you don't have to configure SMTP because the file is sent on next virus database update, i.e., after you update (automatically or manually), the file is sent to Alwil.
Title: Re: Virus not being detected
Post by: DavidR on July 18, 2009, 03:52:39 PM
<snip>
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

To send the file via User Files section in Chest, should I make email settings like SMTP server etc or it will work directly

As my quoted text says it isn't send by email so there is nothing to set-up.
Title: Re: Virus not being detected
Post by: silvermac on July 20, 2009, 05:31:48 AM
hi guys please help me to this one..

I can't update my avast!! the msg was not done yet on VRDB.. what should i do?.. another problem is avast found rootkit.(Rootkit: hidden process).

ty. guys for fast reply
Title: Re: Virus not being detected
Post by: apparle on July 20, 2009, 08:42:38 AM
Virus has been included in the database
Title: Re: Virus not being detected
Post by: .: L' arc :. on July 20, 2009, 01:27:29 PM
Virus has been included in the database

 Good to hear. Thank you for your help.
Title: Re: Virus not being detected
Post by: DavidR on July 20, 2009, 04:16:53 PM
Virus has been included in the database

Thanks for the update.

I hope FWF is monitoring the topic, I guess some brave sole opened the door at least once ;D
Title: Re: Virus not being detected
Post by: FreewheelinFrank on July 20, 2009, 04:30:59 PM
Virus has been included in the database

Thanks for the update.

I hope FWF is monitoring the topic, I guess some brave sole opened the door at least once ;D

At least it didn't take the nine months it took for Arthur Dent to find his plans.