Author Topic: Threat not found by Avast  (Read 3238 times)

0 Members and 1 Guest are viewing this topic.

frampo

  • Guest
Threat not found by Avast
« on: December 22, 2006, 10:09:58 AM »
I have a number of machines running different av programs.
My main computer runs Avast pro and my work laptop runs NOD32.
NOD32 has detected the following threat embedded in spam in my hotmail account, but Avast does not.
Why does Avast not detect this?

Regards
Dan

Threat = JS/redir.AH trojan

JS.Redir.ah
JS.Redir.ah Threat Level: 
 
Alias: JS.Redir.ah,JS_REDIR.AH Platforms: Win 95,Win 98,Win ME,Win NT,Win 2K,Win XP
Updated on: 11 December, 2006
Arrival Form:  Email
Type: Win32,Trojan,JavaScript
Damage: Other
 
 
Analysis
JS.Redir.ah is a malicious JavaScript that is usually embedded in an HTML page that arrives on a system as an attachment to a spammed email message.

Once the recipient opens the attachment, this script loads the web page http://{BLOCKED}ghtBooksDirect.info/?b40eF7ce8fc50T34b5400d5593Bf11ea. The said web page contains another malicious JavaScript.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Threat not found by Avast
« Reply #1 on: December 22, 2006, 12:11:57 PM »
To know if a file is a false positive or it's infected, please submit it to JOTTI or VirusTotal and let us know the result. Thenve, send it in a password protected zip to virus@avast.com
Please, mention in the body a link to this thread and the password used. Thanks.
The best things in life are free.

frampo

  • Guest
Re: Threat not found by Avast
« Reply #2 on: December 26, 2006, 08:09:40 PM »
Email sent.

Dan

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Threat not found by Avast
« Reply #3 on: December 26, 2006, 10:48:27 PM »
Email sent.
Thanks Dan for helping improving avast detection.
The best things in life are free.

frampo

  • Guest
Re: Threat not found by Avast
« Reply #4 on: December 26, 2006, 11:38:43 PM »
your most welcome.