Author Topic: virus kicked avast  (Read 4673 times)

0 Members and 1 Guest are viewing this topic.

gott_ad

  • Guest
virus kicked avast
« on: August 23, 2005, 12:57:55 PM »
hi,

yesterday i have downloaded an archives that contains an exe file with a Trojan.
after unpacking and starting the exe file (avast said NOTHING) the program (msiexec16.exe or something like that) closed avast and started some other programs...
(the Trojan was stupid, it only writes itself to the autorun key in the registry and i have deleted the file, the system is now clean)
but my question is, why haven't avast scanned the exe file after i double-clicked it??? today i have scanned the package (that included the exe file) and avast detected the Trojan!!! should i scan every file with the context-menu-entry, before i starting them???

i have the normal setting for the scan-engines and using avast 4.6 and now I'm waiting for help ;-)
thanks
gott_ad

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: virus kicked avast
« Reply #1 on: August 23, 2005, 02:25:56 PM »
No, you don't have to scan downloaded files if you set the sensitivity to High.
But, archive files are not scanned on-access due to a system performance degradation.
When unpacked, the files should be caught by the Standard Shield.

If you use a download manager, you can add a link to ashQuick.exe to scan the downloaded files.
If you use P2P applictions, enable the provider.
The best things in life are free.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88899
  • No support PMs thanks
Re: virus kicked avast
« Reply #2 on: August 23, 2005, 02:52:48 PM »
Tech you missed his point.
Quote
after unpacking and starting the exe file (avast said NOTHING) the program (msiexec16.exe or something like that) closed avast and started some other programs...
Even when Run avast! didn't detect it and closed avast!.

@ gott_ad - Urgent
If you are not getting a virus warning and you believe it is a new or undetected virus, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem (a link to this thread may be useful), the fact that you believe it to be a new or undetected virus and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: virus kicked avast
« Reply #3 on: August 24, 2005, 12:11:21 AM »
When investigating a similar report a while ago I found that the scanning of executable files had been "clicked off" in the basic settings tab of the customize page of the standard shield.

While this may not be the case here it is worth checking that defaults are in use. 

Tech's point on automating the thorough scanning of downloaded files using ashquick .exe (as I do with Firefox) is very worthwhile too.  (The old refrain - stop the virus before it gets on your hard drive).

 

gott_ad

  • Guest
Re: virus kicked avast
« Reply #4 on: August 26, 2005, 11:42:14 AM »
thanks for replay!
i have send the virus to alwil-soft and i think, i know the problem. the exe file has an icon like an archive and therefore avast thinks it is an self extracting archive and don't scanning it. but it is a faked exe file and it is not an archive.

guestja

  • Guest
Re: virus kicked avast
« Reply #5 on: August 26, 2005, 03:59:54 PM »
Alanrf, From above you posted:
Quote
Tech's point on automating the thorough scanning of downloaded files using ashquick .exe (as I do with Firefox) is very worthwhile too.  (The old refrain - stop the virus before it gets on your hard drive

I use firefox also, and when I download something, I right click and scan it from the context menu.  How are you automating the scan of downloaded files?
« Last Edit: August 26, 2005, 04:09:47 PM by jwa »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: virus kicked avast
« Reply #6 on: August 26, 2005, 05:29:26 PM »
I use firefox also, and when I download something, I right click and scan it from the context menu.  How are you automating the scan of downloaded files?
For Firefox context menu you can use Dr. Web extension.
For downloaded files, use FlashGot to manage downloads. Probably, other extensions would have the option to an external virus scanner.
The best things in life are free.