So bad! Avast can't detect Perfect Keylogger

[alphatran]

Hi my friends,

Today, I surprised so much, Avast CAN'T detect Perfect Keylogger

I don't know from where and when my PC is infected by the key logger above. Without any exclusion items set, Free Avast Antivirus can't detect the key logger which is very famous for many years ago. What a horrible thing!

I uploaded Perfect Keylogger files found from my Windows/system32 folder and 2 screenshots for scan result (one of Avast and one of Spybot Search and Destroy

Infected files (password: 123456): hxtp://www.mediafire.com/?9mh9pc95p9hofid
Avast Scan result (not detected any thing): http://www.mediafire.com/view/?6xi5o6d3cczz78o
Spybot Search and Destroy: http://www.mediafire.com/view/?p0p8447ukwdaap2

THIS IS A BIG WARNING!

[DavidR]

Perfect Keylogger is a legit keylogger isn't it and would under most cases be considered a PUP (not scanned for by default). So were you scanning for PUPs ?

Please remove your sharing link as you have no control over who might download it or what use it may be put to.

Does anyone else have access to this computer ?

[Pondus]

as Davidr say perfectKeylogger is a legit keylogger that you have to buy and install  -http://www.blazingtools.com/bpk.html

and avast detect it as Win32:Perflogger-CG [PUP]     PUP = not a virus = Possible Unwanted Program
a program that can be used for good or bad... depending on who installed it and why


VirusTotal
https://www.virustotal.com/file/b966953b0a0e0bf648b1043b4e708445b52b020a0485921138bbf3be58d9995d/analysis/1357059516/
https://www.virustotal.com/file/6bba0b8d8bf03ba15828c53e72d83d766e44b3238b55ab75348d8ce93bfd0056/analysis/1357059537/
https://www.virustotal.com/file/525414ffe5f797ebdd7de5620b75ff723de17bf8f399ffcd7ddec2d0b8a5dc4a/analysis/1357059560/
https://www.virustotal.com/file/62e2948c3e3857e8304a657b7e7da30cdcb6842f71bd4c678a1734ebbf17198e/analysis/1357059580/

[alphatran]

As you said above: Avast CAN DETECT Perfect Keylogger as something (PUP or not a virus or something else) right?

But in this case, Avast CAN'T detect anything, that's is a big trouble

Will you use an Antivirus if it allows any dangerous programs to run on your pc WITHOUT any warning?

The file is for Avast Team do a research and update. I don't know what the team does everyday then the Avast can't detect a very famous key logger like Perfect Keylogger. Ask you boss for this!

[true indian]

Hi alphatran,

I will be truely honest with you..

If you want avast to detect this...enable scan for PUP in your real time shields...and they wouldnt change the detection since the program is legit...enable PUP>>>real time shields>> file shield>>sensitivity>>check the box that says scan for PUP and click OK..and avast will detect this as PUP...and please remember no antivirus is 100%   

You didnt see the detection at Virustotal:

Kaspersky:   not-a-virus:Monitor.Win32.Perflogger.ahn

so yes avast wouldnt change the detection from PUP to malware...because it is a PUP and NOT A VIRUS/MALWARE.

Please read:
http://www.infotech.us/company-blog/22-5-important-facts-about-antivirus-programs
http://my.opera.com/rejzor/blog/2012/08/08/is-antivirus-software-really-useless


This is what is added in everyday updates:
http://www.avast.com/en-in/lp-fr-virus-update?p_ext=&utm_source=prg_fav_70_0&utm_medium=prg_lnk&utm_campaign=free2paid&utm_content=prg_fav_en-invirus-update&p_var=.%2Ffa%2Fen-in%2Fvirus-update&p_pro=0&p_vep=7&p_ves=0&p_lqa=0&p_lsu=24&p_lst=0&p_lex=58&p_lng=en&p_lid=en-in&p_elm=43&p_vbd=1474

so what they do?? they try their level best to protect their more than 170+ million active users...and 190+ million registered users..

MRG AV TESTS RESULT: http://www.mrg-effitas.com/current-tests/flash-test-results/


and you know what?? if you are cautious of what you mess around the internet...you wouldnt get any crap keylogger or virus from the internet.

[Pondus]

But in this case, Avast CAN'T detect anything, that's is a big trouble

by default it is off because PUP is not virus. so you have to turn PUP scan ON.....in quick and full scan
see attached screenshot...click for big picture

Will you use an Antivirus if it allows any dangerous programs to run on your pc WITHOUT any warning?

It is not dangerous....it is a legit keylogger that you have to buy and install

[alphatran]

I don't buy any key logger to monitor myself sir

Don't type much here, please download the infected files above then scan with PUP turn on in Avast. Then please let me know the result.

The result of Avast Scan in my pc is: NO THREAT FOUND

[Pondus]

I don't buy any key logger to monitor myself sir

then somone with access to your computer may have done so to monitor you ?

[CraigB]

If avast isn't detecting it then that is because it's a legitimate program.

[true indian]

Avast! is detecting it ..Downloaded and extracted the archive you gave..and avast moved all the files into the chest

Real time shields>>file system shield>>expert settings>>>sensitivity>>check the box that says scan for PUP's>>hit OK.

Try performing a full scan with PUP on now.

You should turn on PUP scan in avast full scans and quick scans using the more details option.

see screenshots in attach..

[true indian]

Turn ON PUP scan in AvastUI scan options...hit the more details option under quick and full scan options to enable PUP scan.

Post was splitted due to attachment limit...

see screenshots in attach..

[alphatran]

Hi my friends,

Thanks so much for helping me,

But I'm a professional developer and very familiar to malware analysis.

Try to scan by yourself then post the result here if you are interested in discussion.

Don't tell me you scare of download infected files into your PC .

No one  above try to scan this

[CraigB]

As you can see from true Indian's post/pic he has downloaded an tested and it was detected, if you want your avast to detect it then turn on PUP's.

As others and myself have previously mentioned this is a legitimate program so if you are a professional developer you should understand this and know where and how this program came to be on your system.

[true indian]

Hi my friends,

Thanks so much for helping me,

But I'm a professional developer and very familiar to malware analysis.

Try to scan by yourself then post the result here if you are interested in discussion.

Don't tell me you scare of download infected files into your PC .

No one  above try to scan this

Didnt you see my attached screenshots that I took on the point of avast detection..avast does detect it...you need to enable PUP scan in avast which is NOT turned on by default

Enable PUP scan in your avast in this way:

Real time shields>>file system shield>>expert settings>>sensitivity>>check the box that says scan for PUP's>>hit OK.

Now avast should protect you against this keylogger.

For enabling scan in quick and full scans of avast:

Hit more details option under quick and full scan options in avast user interface>>turn on  PUP scan>>now avast will detect PUP;s in the scan and it will even Pick up the keylogger.

Look at my screenshots in attach

[alphatran]

Hi true indian,

Thanks for your attention in this thread but what you are doing is to talk out of the true:

Let download the video below then do the same as what I do, you will see what you should know:

http://www.mediafire.com/?k0r2c72z3fjx0q6

There is some so bad things the Avast do:

1. Avast CAN'T detect Perfect Keylogger in its scan, whatever Full, Quick or Folder.... THIS IS THE TRUE, take a look on the video or do it by yourself.

2. If the PUP is turn off by default, this should be warned at least on the installation time. But there is no thing to be warned.

3. I think NO ONE wants their antivirus, on which he/she trusted on to protect private information (message, password, bank account....)  to allow any software like key logger, screen monitor, password crapper.... So Avast Manager and Developers are crazy to have the PUP turn off by default. If your customer knows this, they will remove Avast surely.

I spent a day of 1st Jan 2013 for changing many passwords because of this trouble, it's my crazy greeting for new year!

Surely, I remove the Avast to try another after for 5 year to use this.