Author Topic: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!  (Read 7966 times)

0 Members and 1 Guest are viewing this topic.

jstegmann

  • Guest
"Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« on: June 23, 2005, 11:46:26 PM »
Hello all,

Just found out that the virus "Net-Worm.Win32.Mytob.bi" is not identified by Avast Managed Client 4.6.635 with VPS 525-3. The virus identification was made using Kaspersky's online scanner.

The virus is distributed as a zipped e-mail attachment, disguised as a support mail from "admin@domain" - the same old "trick"...  ;)

I've submitted a notification about this to virus@avast.com.

Regards,

JS.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89424
  • No support PMs thanks
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #1 on: June 24, 2005, 12:03:45 AM »
Now I not sure if Avast Managed Client is on the same version numbering as the Home/Pro version but the latest version for Home/Pro is 4.6.665, so you should check for a program update.

The same goes for the VPS which does appear to be the current one.

The Virus Identification being made by another AV may well throw up a different name as there is no standardisation of naming. But I'm sure that it will be checked and added to the VPS.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33974
  • malware fighter
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #2 on: June 24, 2005, 12:17:21 AM »
Hello DavidR,

Here is a very interesting link to go compare the naming of similar viruses with the various AV products:
http://viruspool.vanderkooij.org/
Enjoy his viruspool,

greets,

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

jstegmann

  • Guest
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #3 on: June 24, 2005, 12:47:30 AM »
Now I not sure if Avast Managed Client is on the same version numbering as the Home/Pro version but the latest version for Home/Pro is 4.6.665, so you should check for a program update.

The same goes for the VPS which does appear to be the current one.

It's not the same - the two versions (pro/home and netclient) are distributed independently. However, both my client and VPS versions are indeed up-to-date...


The Virus Identification being made by another AV may well throw up a different name as there is no standardisation of naming. But I'm sure that it will be checked and added to the VPS.

You're absolutely right, but as long as Avast! doesn't detect the thing, I don't know what else to call it. Let's just hope Avast! get a new VPS out soon!

Interesting link, polonus - thanks!

JS.

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #4 on: June 24, 2005, 12:52:03 AM »
New versions of Mytob are emerging every hour:

http://news.bbc.co.uk/1/hi/technology/4080420.stm
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33974
  • malware fighter
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #5 on: June 24, 2005, 08:28:00 AM »
Hi jstegmann,

Just the more reason to make sure your e-mail security is OK. Install a program that can check your e-mails at the place where it should be the server of your ISP, not getting them onto your machine, until you know you want them. In the case of such a program feed it with several black lists so they are marked right out. First think, click later. In this case you close the vulnerability window, and unknown viruses won't reach your inbox. Digital hygiene can save you here.

greets,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

jstegmann

  • Guest
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #6 on: June 24, 2005, 09:34:10 AM »
Hi polonus,

thanks for the advice, but we're actually already using that - it just didn't catch this one. We have a Barracuda box, which does reverse DNS look-up as well as virus-scanning, spam detection etc.  (see www.barracudanetworks.com).

Regards,

JS.

Omar

  • Guest
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #7 on: June 24, 2005, 01:38:18 PM »
Win32:Mytob-HC [Wrm], Win32:Mytob-HD [Wrm], Win32:Mytob-HE [Wrm] are included in todays update!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89424
  • No support PMs thanks
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #8 on: June 24, 2005, 02:43:31 PM »
The Virus Identification being made by another AV may well throw up a different name as there is no standardisation of naming. But I'm sure that it will be checked and added to the VPS.

You're absolutely right, but as long as Avast! doesn't detect the thing, I don't know what else to call it. Let's just hope Avast! get a new VPS out soon!


Currently there are 222 hits on a search of the avast virus database for 'mytob' (without the quotes) although they are not all classed as in the wild.

I have just checked and the w32:mytob-bi [wrm] is in the virus database, so it should now be detected (assuming this is the same one), but when it was added I can't say.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11865
    • AVAST Software
Re: "Net-Worm.Win32.Mytob.bi" not recognized by Avast!
« Reply #9 on: June 24, 2005, 02:47:52 PM »
There are so many variants of Mytob that I'm quite sure the one called "BI" by Kaspersky is called differently by avast!.