Author Topic: Jotti and avast! ?  (Read 64898 times)

0 Members and 1 Guest are viewing this topic.

whocares

  • Guest
Re:Jotti and avast! ?
« Reply #105 on: September 17, 2004, 04:42:02 PM »
Hi Bob,

generally you can use Jotti's service to check a file you deem suspicious.
Because imho the virus definitions are pretty much the same for most scanners, regardless of whether they natively run on Win or Linux
(e.g. a scanner on a Linux mail or fileserver should detect Win viruses as well, cause the files will get distributed to Windows-PCs..)

I don't really need an AV at all, but during helping in this and other Boards I collect potential malware (e.g. from links in Hijackthis-Logs).
And I test them with Offline or Online scanners like Jotti's, and then submit them to Alwil, if it's not detected yet:
to improve avast even further..

 ;)

Jotti

  • Guest
Re:Jotti and avast! ?
« Reply #106 on: September 17, 2004, 04:52:52 PM »
Because imho the virus definitions are pretty much the same for most scanners, regardless of whether they natively run on Win or Linux
(e.g. a scanner on a Linux mail or fileserver should detect Win viruses as well, cause the files will get distributed to Windows-PCs..)
That's not just your humble opinion, that's a fact :)
A linux scanner only detecting linux malware would be quite pointless, since there is very little linux malware, most of which isn't even in the wild.

whocares

  • Guest
CAB-Archives not processed with Jotti/avast-Linux
« Reply #107 on: September 17, 2004, 04:57:56 PM »
Thx Jotti ...  ;)

1) can you confirm that avast-linux doesn't process (Windows-)CAB-files ? (see above) ?
2) When it says on your site that a found malware was non-destructive and wouldn't be included in the database (e.g. a dialer),
I trust that it is still forwarded to the AV-companies whose scanners didn't detect it (assuming that they target this malware-type at all) ?
« Last Edit: September 17, 2004, 05:02:48 PM by whocares »

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re:Jotti and avast! ?
« Reply #108 on: September 17, 2004, 04:58:10 PM »
Maybe I'm confused but what good does Jotti's MalwreScan do for those of us who use a windows operating system?
Please enlighten me. ???

1. It can still provide a useful function of checking, it may not be 100% as the linux version of avast may not examine certain archives but the others might.

2. Even if it is not recognised by avast, the suspect/virus/malware will be passed to avast, helping with updating VPS, that has got to benefit all avast users.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Jotti

  • Guest
Re:CAB-Archives not processed with Jotti/avast-Linux
« Reply #109 on: September 17, 2004, 05:07:39 PM »
can you confirm that avast-linux doesn't process (Windows-)CAB-files ? (see above) ?
Yes, that's confirmed. However, even if the Windows version were to not support cab files (not sure, haven't tried Windows version), upon unpacking the cab file, Avast's on-access scanner will detect the malware, so there should not be any real-world problems.
« Last Edit: September 17, 2004, 05:09:33 PM by Jotti »

whocares

  • Guest
Re:Jotti and avast! ?
« Reply #110 on: September 17, 2004, 05:12:18 PM »
I just wanted to confirm this, so as to know that I need to unpack CAB-files before submitting them to your site
(My real-world problems are usually not related to viruses/Malware ;D ;D )

2) When it says on your site that a found malware was non-destructive and wouldn't be included in the database (e.g. a dialer),
I trust that it is still forwarded to the AV-companies whose scanners didn't detect it (assuming that they target this malware-type at all) ?

Jotti

  • Guest
Re:Jotti and avast! ?
« Reply #111 on: September 17, 2004, 05:22:34 PM »
These are currently not processed in any other way than displaying results (this is still a leftover from an "old" version). I have several technical changes in mind, this is something om my agenda. Changes to internal methods will have to be made, which are not going to happen next week.
But let's not make this a webscanner support thread, friendly fellow :) I'd be happy to continue a discussion like this via e-mail or IM with anyone interested.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Jotti and avast! ?
« Reply #112 on: September 17, 2004, 07:05:02 PM »
BTW we'd be happy to add unCAB support to the linux version but are not very fond of the idea of reverse engineering the format / decompression methods.

CAB uses a combination of methods, including the rather obscure "quantum compression" scheme...

If there's an open source (commercial quality) unCABer, we'd be glad to implement it.

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Online bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 48546
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Jotti and avast! ?
« Reply #113 on: September 17, 2004, 10:29:59 PM »
Thanks for the info. I mainly wanted to find out if this omission in detection in any way hurts the comparison of avast! vs the other AV programs?
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Jlo

  • Guest
Re:Jotti and avast! ?
« Reply #114 on: September 19, 2004, 04:59:38 PM »
Hi All,

Just noticed Jotti has added Dr Web to his scanner!! Well done Jotti :D

Kind Regards

Jlo

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re:Jotti and avast! ?
« Reply #115 on: September 20, 2004, 03:03:38 AM »
 :) yay me drools and grins , now 3 more to get to apear in there  ;D
« Last Edit: September 20, 2004, 03:03:56 AM by Dwarden »
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

stevebasford

  • Guest
Re:Jotti and avast! ?
« Reply #116 on: September 20, 2004, 12:01:47 PM »

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re:Jotti and avast! ?
« Reply #117 on: September 20, 2004, 10:20:31 PM »
If there's an open source (commercial quality) unCABer, we'd be glad to implement it.

Any use?
http://www.kyz.uklinux.net/cabextract.php
http://cvs.sourceforge.net/viewcvs.py/clamav/clamav-devel/libclamav/mspack/


i see it :) Avast! Linux gets cab extraction with soon(TM) comment :)
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
Re: Jotti and avast! ?
« Reply #118 on: February 26, 2009, 11:55:47 AM »
-= I guess Virus Total is better..
Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Jotti and avast! ?
« Reply #119 on: February 26, 2009, 12:13:35 PM »
Virus Total is the best, in our opinion because:
1) It uses the Windows version of the AVs so avast has more unpackers for windows and that is the version most are using.
2) There are 27 different scanning engines greater than the others.
3) It also has an email submission option for periods when they are busy and you get a reply.
4) It can cue the submission and you can carry on browsing and you will eventually (not to long) get your result displayed.
The best things in life are free.