Author Topic: Jotti and avast! ?  (Read 65223 times)

0 Members and 1 Guest are viewing this topic.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Jotti and avast! ?
« Reply #75 on: September 07, 2004, 01:05:14 PM »
I did some more testing and it sure looks like Jotti has not enabled archive scanning for Avast, since none of the archives I tested (arj, jar, zip, rar) where detected as having infected files while I know for sure there where infected files in it. I already notified Jordi about this.

softwareguy

  • Guest
Re:Jotti and avast! ?
« Reply #76 on: September 07, 2004, 05:13:19 PM »
It would be useful to list the detected malware in for example: (a zip).

Jlo

  • Guest
Re:Jotti and avast! ?
« Reply #77 on: September 07, 2004, 06:35:57 PM »
Hi Eddy,

Well I have just tested his scanner with a few virus samples in a zip file and it detected them no problem.

I then took the file and compressed them with RAR and it was not detected by Avast or many of the other scanners.

So in conclusion Jotti;s set up scans Zip files but NOT Rar files. I have not tested it with any other compression ulity.

Cheers

Jlo

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Jotti and avast! ?
« Reply #78 on: September 07, 2004, 06:43:49 PM »
Jlo,

as I said in my earlier post. Avast archive scanning seems not to be enabled. I didn't say anything about the others.

Jlo

  • Guest
Re:Jotti and avast! ?
« Reply #79 on: September 07, 2004, 06:47:11 PM »
Fair point and no conflict intended :) but you said zip files are not scanned with avast when every zip file I have submitted to Jotti' scanner has been detected by avast no probs.

Kind Regards

Jlo

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Jotti and avast! ?
« Reply #80 on: September 07, 2004, 06:54:45 PM »
Looks like Jordi has changed it after I mailed him ;D
Pretty fast respons I must say.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9408
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Jotti and avast! ?
« Reply #81 on: September 07, 2004, 07:15:00 PM »
Well,RAR decompression (RAR 3.x compression,solid archiving,big dictionary) is also more demanding than ZIP decompression (standard Deflate compression). And as i understand his scanner hardware is not a Dual 2GHz Opteron based CPU and gigs of RAM,but a weak machine...
You also need to understand this.

Maybe he should try using donate (PayPal?) style payment for his service.
I'm sure there is many peoples that would like to help him.
Visit my webpage Angry Sheep Blog

Jotti

  • Guest
Re:Jotti and avast! ?
« Reply #82 on: September 08, 2004, 12:44:23 AM »
Hello,

I don't know what leads people to think I have misconfigured any scanner on my website, but I assure you, archive scanning is being done. If a particular scanner, avast or another, cannot process a particular archive, that is not my service's fault. I rely on the scanners' unpacking capabilities, just as Joe Average would on their home system. I have had contact with several AV vendors asking (although some came directly to me) if my configuration was right, and it turned out to be perfectly OK every time. I know people like to see high scores. Just keep in mind this is not your average scanner test.

Every single scanner used obtains a substantially lower score due to several factors. I receive a lot of very, very new malware. Often packed with exotic packers (yes, the underground knows of this website).
For your reference: Kaspersky's AVP often scores >99% in offline tests with archives often dominated by 'old' samples. Still, I submit approximately 10-15 files every week, which they add to their detection files. That shouldn't be possible considering their >99% detection ratio, yet it happens. I've seen 50 files detected by no single scanner suddenly appearing in the rescan results in less than a single month. That means at least 2 files pass my scanner undetected every single day. This is not a static malware archive for which results are counted. People with problems often use my scanner to determine if their suspicious files are malware. If their antivirus product detected these already, they wouldn't send these files in the first place.
I hope you understand this is not your average test. Don't take my word for it, have a look at a similar website:

http://www.virustotal.com

particularly this graph:

http://www.virustotal.com/flash/graficas/grafica4_en.html

A lot of malicious files pass their scanners as well, they just choose not to be as specific about the results as I am.

I trust this will answer most of the (unasked) questions here. If you have any other uncertainties, feel free to contact me.

By the way... I will buy a new server in the near future. This old thing is giving me the creeps with its system load the past few days...
« Last Edit: September 08, 2004, 12:47:27 AM by Jotti »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48612
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Jotti and avast! ?
« Reply #83 on: September 08, 2004, 01:35:51 AM »
Jotti
Thanks very much for joining these forums. My sincere thanks for the excellent service your site provides.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Jlo

  • Guest
Re:Jotti and avast! ?
« Reply #84 on: September 08, 2004, 01:57:53 AM »
Hi All,

Just noticed that Jotti has just put a paypay donate button on his website for anyone that is interested. It is a good service to have on the net and I have just donated.

Cheers

Jlo

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re:Jotti and avast! ?
« Reply #85 on: September 09, 2004, 06:23:51 AM »
oh no, statistics were removed ....

end of world happened ... DAMN whiners ...

is there chance i can ask to get myself added to exception list? :)
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89222
  • No support PMs thanks
Re:Jotti and avast! ?
« Reply #86 on: September 09, 2004, 12:14:21 PM »
I don't think that we should lose track of the major benefit of avast's participation in Jotti and that is notification of new/undetected virus types.

This is more important than seeing who has the best stats and as Jotti said, the results can be very different to the real (single AV, stand alone PC) world.

- Jotti
Thank you for your valuable service and contribution on these forums.

David
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

softwareguy

  • Guest
Re:Jotti and avast! ?
« Reply #87 on: September 10, 2004, 05:06:35 PM »
Yea... I would also like to see the results. ::)

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11860
    • AVAST Software
Re:Jotti and avast! ?
« Reply #88 on: September 14, 2004, 11:54:25 AM »
So in conclusion Jotti;s set up scans Zip files but NOT Rar files. I have not tested it with any other compression ulity.

Actually, you are right. Jotti's site is using the linux version of avast!, which doesn't support as many archives as the Windows version.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48612
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Jotti and avast! ?
« Reply #89 on: September 14, 2004, 03:54:27 PM »
Igor
Than Avast! is actually being short changed in the test results.
I hope he's been forwarded the windows version.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet