Author Topic: Why removing virus detection from VPS?  (Read 5327 times)

0 Members and 1 Guest are viewing this topic.

Offline XMAS

  • Avast translator
  • Super Poster
  • ***
  • Posts: 1211
  • Santa is watching you ;)
    • avast! in Bulgarian
Why removing virus detection from VPS?
« on: September 04, 2005, 06:03:42 PM »
Hi to all :)

I have one question. Why from Alwil are removing virus detections from the VPS file?

For example one week or two ago, avast! detected virus in one file called SAcc.exe(I don't remember the virus name, but it was something with  Win32:trojano 2XXX(the "X" are some numbers)) and now avast! say that the file is clean!!!
Here's a Jotti scan results


File:      SAcc.exe
Status:    
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5    dd2bfdb316c9bf8d02d2419aba787f66
Packers detected:    
UPX
Scanner results
AntiVir    
Found nothing
ArcaVir    
Found Adware.Surfaccuracy.B
Avast    
Found nothing
AVG Antivirus    
Found nothing
BitDefender    
Found nothing
ClamAV    
Found nothing
Dr.Web    
Found not a virus Adware.SurfAcc
F-Prot Antivirus    
Found nothing
Fortinet    
Found Adware/SurfAccuracy
Kaspersky Anti-Virus    
Found not-a-virus:AdWare.SurfAccuracy.b
NOD32    
Found Win32/Adware.SurfAccuracy application
Norman Virus Control    
Found nothing
UNA    
Found nothing
VBA32    
Found AdWare.SurfAccuracy.b


That seems very strange. I know that there are problems with false positives, but this is a real malware, that at first avast! was detecting and now nothing  :P

P.S. > I know that this file is only adware, but....
« Last Edit: September 04, 2005, 06:21:14 PM by .:X:M:A:S:. »
You've Got To Get Close To The Flame To See What It's Made Of...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Why removing virus detection from VPS?
« Reply #1 on: September 04, 2005, 08:13:05 PM »
I have one question. Why from Alwil are removing virus detections from the VPS file?
They never do that. Maybe just they change the viruses names into the VPS.
The best things in life are free.

Offline XMAS

  • Avast translator
  • Super Poster
  • ***
  • Posts: 1211
  • Santa is watching you ;)
    • avast! in Bulgarian
Re: Why removing virus detection from VPS?
« Reply #2 on: September 04, 2005, 08:16:15 PM »
They never do that. Maybe just they change the viruses names into the VPS.

I don't think so, because if they had only changed the names, the file will still be detected as a malware.
But the file isn't detected  and was detected before  :-\
You've Got To Get Close To The Flame To See What It's Made Of...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Why removing virus detection from VPS?
« Reply #3 on: September 04, 2005, 08:26:26 PM »
But the file isn't detected and was detected before  :-\
It could be a 'bad' new signature for it but they don't remove protection (signatures) deliberatelly, I'm sure.
The new ones are poor, were changed to avoid false positives or whatever...
The best things in life are free.

Offline XMAS

  • Avast translator
  • Super Poster
  • ***
  • Posts: 1211
  • Santa is watching you ;)
    • avast! in Bulgarian
Re: Why removing virus detection from VPS?
« Reply #4 on: September 04, 2005, 08:43:33 PM »
It could be a 'bad' new signature for it but they don't remove protection (signatures) deliberately, I'm sure.
Well this could be the reason. Lets hope that they won't do that regularly  :-\

Thanks for the answer Tech.
You've Got To Get Close To The Flame To See What It's Made Of...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Why removing virus detection from VPS?
« Reply #5 on: September 05, 2005, 01:12:19 AM »
Well this could be the reason. Lets hope that they won't do that regularly  :-\
Thanks for the answer Tech.
In fact, it was just a GUESS.
It's better if Alwil give the answer. I can't be sure what's happening...  :P
The best things in life are free.