Attention Alwil: Trojan.Win32.Tiny.i not detected by avast (yet)

[Lisandro]

Trojan.Win32.Tiny.i

Description: A trojan, also known as a trojan horse, is simply a program that pretends to be something else.

Why are trojans or trojan horses so dangerous? The basic idea is that you download a program, for example one that you think is some sort a game demo. When you run the demo, to your surprise, nothing happens. Or so you thought.

What may have happened is that you've just unwittingly run some form of program that has planted itself on your hard drive. Perhaps it's going to be a very basic application, and simply delete some files on your system. Perhaps it's an even more sinister tool that will actually give other people full access to your hard drive and system. Sounds ridiculous? It happens literally every single day, to computer users all around the world.

Both a-squared and AVGas detect it. avast doesn't 
File submitted both to VirusTotal and from Chest to Alwil.

[Lisandro]

Complete scanning result processed in VirusTotal at 07/04/2007 03:46:34 (CET).

[ file data ]
* size: 7214
* md5.: b30e9760efadf232ff9a04372c8a65b9
* sha1: 32105b51ddad3eab9bc3688db5a31f6e5dfc4cf7

[ scan result ]
AhnLab-V3 2007.7.4.0/20070704 found nothing
AntiVir 7.4.0.37/20070703 found [TR/Tiny.I.1]
Authentium 4.93.8/20070703 found nothing
Avast 4.7.997.0/20070703 found nothing
AVG 7.5.0.476/20070703 found [Downloader.Generic4.YLU]
BitDefender 7.2/20070704 found [Trojan.Tiny.G]
CAT-QuickHeal 9.00/20070703 found [Trojan.Tiny.i]
ClamAV devel-20070416/20070704 found nothing
DrWeb 4.33/20070703 found [Trojan.DownLoader.24718]
eSafe 7.0.15.0/20070703 found [Win32.Tiny.i]
eTrust-Vet 30.8.3761/20070703 found [Win32/Chepvil!generic]
Ewido 4.0/20070703 found [Trojan.Tiny.i]
F-Prot 4.3.2.48/20070703 found nothing
F-Secure 6.70.13030.0/20070704 found [Trojan.Win32.Tiny.i]
FileAdvisor 1/20070704 found nothing
Fortinet 2.91.0.0/20070703 found [W32/Tiny.I!tr]
Ikarus T3.1.1.8/20070703 found [Trojan.Win32.Tiny.i]
Kaspersky 4.0.2.24/20070704 found [Trojan.Win32.Tiny.i]
McAfee 5066/20070703 found nothing
Microsoft 1.2701/20070704 found nothing
NOD32v2 2376/20070703 found [a variant of Win32/TrojanDownloader.Nurech.NBG]
Norman 5.80.02/20070703 found nothing
Panda 9.0.0.4/20070704 found [Trj/SpyForms.AR]
Sophos 4.19.0/20070628 found [Troj/TinyDL-K]
Sunbelt 2.2.907.0/20070704 found [Trojan.Win32.Tiny.i]
Symantec 10/20070704 found [Downloader]
TheHacker 6.1.6.141/20070702 found [Trojan/Tiny.i]
VBA32 3.12.0.2/20070703 found [Trojan.Win32.Tiny.i]
VirusBuster 4.3.23:9/20070703 found [Trojan.Tiny.HI]
Webwasher-Gateway 6.0.1/20070703 found [Trojan.Tiny.I.1]

Is it a joke? :'(

[DavidR]

It's not a joke, it isn't funny, it is very disappointing/displeasing/disheartening/dismal/disastrous/distressing/dismissive to say that 'dis' needs some serious attention is a huge understatement, words almost fail me to express my displeasure.

When people take the time to submit sample especially from the chest for it to take weeks or worse still months and still no detection. I find it hard to suggest that people submit undetected samples without a warning that this is a very slow process.

After over three happy years with avast I have to say we risk the good publicity built up over time if we fail to get a grip on sample submission. These submissions aren't zoo samples but effectively in the wild and there prompt addition will protect all avast users, especially those not savvy enough to look after themselves and rely 100% on avast.

[Lisandro]

After over three happy years with avast I have to say we risk the good publicity built up over time

It's being difficult to explain to a friend of mine that got infected with these two nasties that avast still worth a try. So, if Alwil doesn't not want we start bashing... it would be good if drop some acknowledgment.

[Lisandro]

Vps is already up to date (current version 000754-2) and avast does not detect it :'(