Author Topic: Ransomeware not detected  (Read 2826 times)

0 Members and 1 Guest are viewing this topic.

la taupe

  • Guest
Ransomeware not detected
« on: April 03, 2012, 11:10:09 AM »
Hi yesterday I had trouble with this kind of ransomeware : https://www.ecops.be/webforms/Default.aspx?Lang=NL
AVAST didn't detect it nor stopped it in his tracks ..... the only "solution" was to go back in time with system restore (windows7)
This ransomeware is becoming a big issue in Belgium, Holland and Germany.... please adress this !

AdrianH

  • Guest
Re: Ransomeware not detected
« Reply #1 on: April 03, 2012, 11:15:07 AM »
"Ransomeware" is just a generic term. You need to report specific details to avast.  There is new malware every day and samples are needed to be able to deal with it.

Offline AntiVirusASeT

  • Poster
  • *
  • Posts: 462
Re: Ransomeware not detected
« Reply #2 on: April 03, 2012, 01:21:39 PM »
@la taupe: i hope u understand that no antivirus catches everything (if u expect that, u will be disappointed)

that said, u can help in the detections by reporting here http://forum.avast.com/index.php?board=4.0 (virus section of Avast!)


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: Ransomeware not detected
« Reply #3 on: April 03, 2012, 01:34:35 PM »
And system restore does not remove the infection......so it is still there

Follow this guide and attach the logs from Malwarebytes quick scan / OTL / aswMBR
http://forum.avast.com/index.php?topic=53253.0
« Last Edit: April 03, 2012, 03:36:33 PM by Pondus »

robert1021

  • Guest
Re: Ransomeware not detected
« Reply #4 on: October 04, 2012, 02:55:47 PM »
There is another ransomeware out there called fbi moneypak - it somehow attaches to your log in username and ip address.  avast did not detect it nor did it clean it up.  malwarebytes however did.

true indian

  • Guest
Re: Ransomeware not detected
« Reply #5 on: October 04, 2012, 03:13:59 PM »
There is another ransomeware out there called fbi moneypak - it somehow attaches to your log in username and ip address.  avast did not detect it nor did it clean it up.  malwarebytes however did.

You could send the Undetected infected files from www.avast.com/contacts for addition of detection.

Avast! does detect all these ransomwares...but these things are being sent out in bulks and being re-packed and modified contantly that's why AV's are failing against it.  ;D
« Last Edit: October 04, 2012, 03:18:22 PM by true indian »

Nesivos

  • Guest
Re: Ransomeware not detected
« Reply #6 on: October 04, 2012, 07:24:42 PM »
The problem here is that avast! does not have a program "whitelist" feature which I would really love to see added.   With a "whitelist" feature you deny all programs by default.   If designed and coded properly a "whitelist" feature should protect against Ransomware unless the user is the "Click Through" type

In the meantime WinPatrol Plus can help protec against the installation and running of Ransomeware.