Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: spywar on December 24, 2012, 11:19:43 PM
-
Hi guys, I have just submitted 55 samples one per one from the chest...
The quetion is what's going to happen now ?
From the video of communityIQ I saw, the AV lab is going to receive my samples with other automated submission, and scan them throught their servers to classify them right ? (please tell me if I'm ok).
And if a sample isn't categorize by the classifiers they get manual analysis right ?
Many thanks, best wishes and merry Christmas !
spywar.
-
You've already answered your own question. :)
-
Thanks for the reply anyway, much appreciated.
Just to know what is the email to send many samples ?
-
Ok I have searched on Google and I found "virus@avast.com" I suspect this is the good one.
-
I suspect this is the good one.
Yes.
-
Thanks for the confirmation,
Have a good day !
spywar.
-
Thanks for the reply anyway, much appreciated.
Just to know what is the email to send many samples ?
zip and password protect.... and send to virus @ avast.com i recomend using 7zip or rar that also encrypt the content so any mail scanner dont block it
zip password: infected
mail subject: undetected sample(s)
-
That's what I did few minutes ago for 23 samples.
A last quetion : Is it a problem if I gave them a direct link to zippyshare with malware pack which pass was infected ?
Clearly, that's what I sent
"23 samples
(xxx)
pass: infected".
It's ok ?
-
deepends if they have time to download.....do not know
anyway, if the samples are tested at VT...they sooner or later get them since they are member there
OBS...and dont post download links to malware in the forum as this is not a distribution sentral ;)
-
Btw, can I put the zipped file which contains samples in virus chest, then I submit it directly from chest and in comment I give them the password.
-
You shouldn't have to password protect the zip file in the same way as an email as it isn't going through email servers, but direct to avast.
That said you can't give any individual detail for the samples in the zip.
Please modify your previous post and remove the file share link. You have no control over who may download it or what they might do with it.
-
Hi DavidR the file share is an example as you see it's not the original, but I'm gonna edit it anyway.
So I do not have to put any password for submission from chest no prob.
-
So I do not have to put any password for submission from chest no prob.
the reason for password protecting is to avoid mail server virus scanners to remove/block the mail......if that happens avast lab never get the samples :'(
the reason for using a zip program that also encrypt is that some scanners can see what is inside
like Gmail, if you zip and password protect a .exe file and try to send it with Gmail, it will block....Gmail will not let you send a .exe file....
if you use 7zip or rar that also encrypt the content the file will be sendt
-
What I'm gonna do, is to submit every samples from chest it's faster and better.
-
Hi DavidR the file share is an example as you see it's not the original, but I'm gonna edit it anyway.
So I do not have to put any password for submission from chest no prob.
OK, I wasn't aware that you were using it as an example, but it clarifies the point of not using sharing links for malware.
It is certainly much easier to use the chest for sample submission.
Merry Christmas.
-
First thanks for all this clarification which is much appreciated for me to understand how systems work ...
Just another quetion regarding chest submission :
After the submission a message appears and say "file will be submitted on next update".
What does it exactly mean ? On next VPS update ? :o
Best wishes,
spywar.
-
yes...next time avast check for signature/program updates......or at once if you do a manual check ;)
-
Hello,
I usually submit new samples in a easier way, without need to zip and password protect the files...
I usually go to this link: http://www.avast.com/contacts , click in the "general contact" blue button, choose "Report of undetcted malware" and fill the remaining fields...
In the last 10 times that I submitted this way, all the samples were detected in less than 24 hours.
Good christmas!
-
Many thanks Tonanet, it looks like there are many ways of malware submission.
-
Hello,
I usually submit new samples in a easier way, without need to zip and password protect the files...
I usually go to this link: http://www.avast.com/contacts , click in the "general contact" blue button, choose "Report of undetcted malware" and fill the remaining fields...
In the last 10 times that I submitted this way, all the samples were detected in less than 24 hours.
Good christmas!
Is it possible to send a pack and give the password in comment by using this way ?
-
I hope tomorrow morning after VPS update, MOST OF samples I sent will get detected. ATM, only 5 more detected by streaming updates (as there were not any AV updates since this morning) but I'm sure after next VPS update many more samples will be detected.
-
I hope tomorrow morning after VPS update, MOST OF samples I sent will get detected. ATM, only 5 more detected by streaming updates (as there were not any AV updates since this morning) but I'm sure after next VPS update many more samples will be detected.
You need to be patient,sometimes the reaction times for certain not in the wild samples can be slow...atleast what I have noticed...so keep sending and dont loose hope :)
btw,just submitted 500 pieces of malicious binaries to avast labs! ;D
-
If their automated analysis systems do not detect the samples after analysis, they have to check sample manually and that takes a bit more time.
-
In-the-wild malware tend to get higher attention and priority.
They usually do not answer automatically to the submissions.
Rescan the files within Chest and check if any of them got detected by avast!