Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: tsilo on June 12, 2007, 04:35:02 PM

Title: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 04:35:02 PM: Hi there
I know one site when I always, several times at day, found new variants of Trojan.Downloader.Zlobs
These variants are always new, I often submit them to virustotal.com and all time they are recognized by few AV-s.
What about Avast!, it never detects them, even when I submit them to Alwil. So I have two questions:
1. Is there any way submit that website to Alwil research team? they will themself found them and add to signatures.

2. Can Avast! detect with generic signatures variants of Trojan.Downloader.Zlobs?
Title: Re: How to submit website to Alwil?
Post by: Lisandro on June 12, 2007, 05:14:18 PM: Quote from: tsilo on June 12, 2007, 04:35:02 PM
1. Is there any way submit that website to Alwil research team? they will themself found them and add to signatures.
Post an EDITED link of it here (adding spaces and NOT A LIVE link where people could click).

Quote from: tsilo on June 12, 2007, 04:35:02 PM
2. Can Avast! detect with generic signatures variants of Trojan.Downloader.Zlobs?
Did you check avast VPS history?
The virus does not seem to be in database... but could be with another name, as there isn't an international convention to virus names.
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 05:39:11 PM: Ok I will explain how to get these viruses:
First of all I want to say that, these links will redirect you in adult sites, so because of it I wanted do this anonymously, but ...if you want I posted here no problem...
Go to :
www. phazep2p.com/select.php?ss=porn1 or
www. phazep2p.com/select.php?ss=porn2

There are pictures and you must click one of them, you will get setup.exe that always contains virus I sad.
If you will do this several times at day, you will get always new variant of this virus!
Title: Re: How to submit website to Alwil?
Post by: DavidR on June 12, 2007, 05:59:49 PM: Trying to submit that site to DrWeb link checker fails several urls attempted (all with the www. added):
phazep2p.com/select.php?ss=porn1
phazep2p.com/select.php
phazep2p.com

This would appear as this is a redirect page so there is no way to check outside of visiting the site and download the setup and sorry but I'm not prepared to do that.
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 06:14:54 PM: There is not risk to be infected if you will not execute setup.exe, but anyway if you don't want don't do this. I only want always chek this site Alwil research team...
Title: Re: How to submit website to Alwil?
Post by: Lisandro on June 12, 2007, 09:01:38 PM: Quote from: tsilo on June 12, 2007, 06:14:54 PM
There is not risk to be infected if you will not execute setup.exe, but anyway if you don't want don't do this. I only want always chek this site Alwil research team...
Indeed... sites seem clean if the user does not download anything.
Although they're classified as malware source by other filters.
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 09:15:17 PM: When you download setup.exe it comes from different site, so there is no need scan sites i wrote.
If you will click images in this site, you will redirected in another site, where this virus appears.
I wrote these sites as a source to get always new variants of zlobs for Alwil research team and will be great they always chek it and add these viruses to database.
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 09:25:57 PM: If you want direct link here it is:

www. todaysfreevideo.com/matures/5sv-mix-s7g4/3/movie2.php?id=1336&bgcolor=000000&border=660000
Title: Re: How to submit website to Alwil?
Post by: Lisandro on June 12, 2007, 11:12:28 PM: Quote from: tsilo on June 12, 2007, 09:25:57 PM
If you want
I want nothing... I wish Alwil team improve detection, nothing more, nothing less.
Even the new link does not reveal the virus...
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 11:29:12 PM: It's because De.Web don't detects it.
I already sad every 5-6 hours there you can find new variants of Zlob and I also hope Avast! will improve detection.
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 12, 2007, 11:48:19 PM: I found McAfee SiteAdvisor review about this site, I think it's interesting:

http://www. siteadvisor.com/sites/todaysfreevideo.com
Title: Re: How to submit website to Alwil?
Post by: Lisandro on June 13, 2007, 12:58:10 AM: Infected files... :P
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 13, 2007, 01:04:49 AM: :)
Tech can you report this site to Alwil? if they will pay attention to it, Avast! will detect much more Zlobs that today 8)
Title: Re: How to submit website to Alwil?
Post by: Lisandro on June 13, 2007, 03:14:49 AM: Quote from: tsilo on June 13, 2007, 01:04:49 AM
:)
Tech can you report this site to Alwil? if they will pay attention to it, Avast! will detect much more Zlobs that today 8)
I've done... but I don't think they pay attention to me more than any other virus submition...
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 22, 2007, 02:50:48 PM: Seems like Alwil will not pay attention to that site.
I added this site to block list, I opened Avast! on-acces scaner, web shield, customize, URL blocking, Add --> http://www. todaysfreevideo.com/*

I recommend to repeat same action to ALL Avast! users!
Title: Re: How to submit website to Alwil?
Post by: Lisandro on June 22, 2007, 03:52:20 PM: Quote from: tsilo on June 22, 2007, 02:50:48 PM
blocking, Add --> htpp://www. todaysfreevideo.com/*
You or anybody else, while adding this setting, must change htpp to http and remove the space after the first dot 8)
Title: Re: How to submit website to Alwil?
Post by: tsilo on June 22, 2007, 03:59:14 PM: I corrected http :) , but space you know why I made it 8)