Avast WEBforum

Other => Viruses and worms => Topic started by: harman123 on April 21, 2010, 10:43:31 PM

Title: Adware not detected!
Post by: harman123 on April 21, 2010, 10:43:31 PM
hxxp://www.flvdirect.com/

http://www.virustotal.com/analisis/ba96e8da224e50501d3b1d2876cc728cd9abb30c268c108ddbd03c76a2d6fc68-1271882355

http://sunbeltblog.blogspot.com/2010/04/bot-installs-adware-along-with-video.html

http://www.siteadvisor.com/sites/flvdirect.com

http://www.mywot.com/en/scorecard/flvdirect.com
Title: Re: Adware not detected!
Post by: polonus on April 21, 2010, 11:06:09 PM
SiteTruth is not very positive either:

Site rating
Rating: "Site ownership unknown or questionable."
No Location
 
Domain to be rated
Will rate domain "flvdirect.com"
 
Secure certificate
No valid certificate.
 
Contents of web site
Site "FLV Direct"
No street address found on the site. 
 
Negative information report
No negative information on file.
 
Information from secondary sources
Commercial site.
 
Rating history
No rating history on file. 

Site Internet address: 174.137.132.248
Examined on 2010-04-21 13:56:05
Rating #118576

polonus
Title: Re: Adware not detected!
Post by: harman123 on April 22, 2010, 05:11:30 PM
Even Cnet post download for this adware.   :(

hxxp://download.cnet.com/FLV-Direct-Player/3000-2139_4-75115630.html
Title: Re: Adware not detected!
Post by: Pondus on April 22, 2010, 05:26:04 PM
I sendt it to MBAM yesterday, and it is now detected as " Adware.Dropper "

Anubis
http://anubis.iseclab.org/?action=result&task_id=1fa85256ce9c555b4fda3a993cb63c594&format=html

VirusTotal score is still the same 1/41
Title: Re: Adware not detected!
Post by: harman123 on April 23, 2010, 05:51:32 PM
Malwarebytes detected FLV direct as "Adware DoubleD"   :)

But Avast still not detecting it!  :'(

http://virusscan.jotti.org/en/scanresult/4e24a88cc0dedac4d5ba8f9be44c83591b7bb3c8  

http://www.virustotal.com/analisis/a1862d8fbabc22eb0e05c304612a8b529214a441ee9ae5db40ed142a7eb60d6f-1272038082

http://virscan.org/report/9846a08ae91c44e7e8883a4ab17be03b.html

Title: Re: Adware not detected!
Post by: Pondus on April 23, 2010, 07:03:31 PM
I think we may have a new version, i downloaded a new and tested

My MBAM say Adware.Dropper but does not detect Nr.2
C:\Users\odd\Downloads\virus_sample\FLVDirect\FLVDirect.exe (Adware.Dropper) -> Quarantined and deleted successfully.

VirusTotal - 4/40 - MD5   : 4021a1aefeb40d31d285a21aaf95ec89
http://www.virustotal.com/analisis/06959c6768be6ef8131ae6c3e3a09b83bc693a14afd86f1d676cca71473b6ba6-1272041570

VirusTotal - 5/41 - MD5...: da968b5bb922b6d102731d0333b9f338
http://www.virustotal.com/analisis/ff20473284f3c3d30e4e39b8ed3a58b6b037e2e239bc2bbcd3fc5be94e2cc53d-1272041790
Title: Re: Adware not detected!
Post by: harman123 on April 27, 2010, 02:44:19 PM
Still not detected   :'(

http://www.virustotal.com/analisis/2e33ea6c75c53433cb7a51dfbc4790ebd9ebffbb0cecfaf240071c13db49ff58-1272372108
Title: Re: Adware not detected!
Post by: alear on April 27, 2010, 03:07:04 PM
Quote from: harman123 on April 27, 2010, 02:44:19 PM
Still not detected   :'(

http://www.virustotal.com/analisis/2e33ea6c75c53433cb7a51dfbc4790ebd9ebffbb0cecfaf240071c13db49ff58-1272372108
hello
i can´t register my avast 5.0 free, it ask me for a file with the license, but  in the demo, just shows to click on the interface cut and past the license number not for a file.
can somebody tell me what am i doing wrong?
Title: Re: Adware not detected!
Post by: DavidR on April 27, 2010, 04:54:26 PM
 - Please start a New Topic of your own as this seems unrelated to the original subject and will just confuse the topic and we will try to help. 
- Go to this link, http://forum.avast.com/index.php (http://forum.avast.com/index.php), scroll down to the avast! Free/Pro/Suite forum and click it, click the New Topic button at the top of the list and post there.
Title: Re: Adware not detected!
Post by: Pondus on April 27, 2010, 06:14:28 PM
Quote from: harman123 on April 27, 2010, 02:44:19 PM
Still not detected   :'(

http://www.virustotal.com/analisis/2e33ea6c75c53433cb7a51dfbc4790ebd9ebffbb0cecfaf240071c13db49ff58-1272372108
Yes they do, on the original submitted sample and so does MBAM
http://www.virustotal.com/analisis/ff20473284f3c3d30e4e39b8ed3a58b6b037e2e239bc2bbcd3fc5be94e2cc53d-1272384519

and from MBAM forum / Quote:
The FLVplayer available from the homepage is not the same file as the FLV player that has been in the news for being spammed@ social network sites with Loudmo adware thrown into the install

We will not add detection for files from the hompage source but we are tracking the ones that have been tampered with by their rogue affiliate....


and when i download a new FLVD player and send it to virustotal....avast detect it............so why not your sample @harman123    ???
http://www.virustotal.com/analisis/2a29cb41d4d32dba30a92706698c1de75b4f237be2c4741152513669ed479454-1272386424