Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: nickzn on June 05, 2006, 04:19:19 PM

Title: Report Unknown Virus
Post by: nickzn on June 05, 2006, 04:19:19 PM

Infect USB storage device and not detected by many antivirus including avast

Activated by double click on the device and release an AdobeR.exe to C:\windows


Open the USB disk to find (Show hidden files of course)

AdobeR.exe & autorun.inf 


To kill it manually

1.kill the process AdobeR.exe

2.delete AdobeR.exe & autorun  in USB device

3.delete AdobeR.exe in C:\windows

4.find out and delete all AdobeR related registry

5.run msconfig and remove the startup AdobeR option



I'll try to get a sample later since I've already deleted it...

Hope avast to be the first to be able to detect it.


Nothing to do with Adobe,  just a similar name

Title: Re: Report Unknown Virus
Post by: nickzn on June 06, 2006, 02:56:05 AM

I managed to get a sample, to whom should I mail it?

Title: Re: Report Unknown Virus
Post by: Lisandro on June 06, 2006, 03:14:23 AM

Quote from: nickzn on June 06, 2006, 02:56:05 AM

I managed to get a sample, to whom should I mail it?

Send an email with the file (false positive or infected) to: virus@avast.com

You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

You can zip and password the files... Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.  :)

Title: Re: Report Unknown Virus
Post by: nickzn on June 06, 2006, 04:30:40 AM

Quote from: Tech on June 06, 2006, 03:14:23 AM

Send an email with the file (false positive or infected) to: virus@avast.com

You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

You can zip and password the files... Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.  :)

I tried the FTP server, but failed because of poor link speed

So I mailed it to the email above


Question is : In the 3rd method, how can I move it to chest while avast don't detect it?

Title: Re: Report Unknown Virus
Post by: justin1278 on June 06, 2006, 04:32:36 AM

Go to avast! Simple user interface, then open the chest, then go to user files, add a new file option toward the top of the chest. Add the file to the chest, then delete the original.

Regards,

Justin

Title: Re: Report Unknown Virus
Post by: nickzn on June 06, 2006, 05:08:12 AM

thank you !

Title: Re: Report Unknown Virus
Post by: justin1278 on June 06, 2006, 06:49:59 AM

Hi,

My pleasure, hopefully the avast! team will get on that virus sample quickly.