Author Topic: Trojan not found inside rar archive  (Read 9909 times)

0 Members and 1 Guest are viewing this topic.

fLa

  • Guest
Trojan not found inside rar archive
« on: October 29, 2005, 12:15:09 AM »
I know I had a trojan inside a rar archive so I tested it with avast4 - it did NOT detect it? It is in a windows .exe file inside the rar package.

After unraring the package and scanning the files avast did detect this trojan,  Win32:Trojano-704

/fLa

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Trojan not found inside rar archive
« Reply #1 on: October 29, 2005, 02:03:51 AM »
Was the rar package passworded?
If not, can you send an email with the file to: virus@avast.com
You can zip and password the files... Inform a link to this thread and the password used.
Or you can send the files to Chest and, from there, resend to Alwil for analysis.
The best things in life are free.

fLa

  • Guest
Re: Trojan not found inside rar archive
« Reply #2 on: October 29, 2005, 12:22:30 PM »
Hi!
No, no password protected rar package. I have sent the file to virus@avast.com I'm glad to help out.

How was I supposed to the the Chest and Alwil thingi? Where do I find the Chest?

/fLa

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: Trojan not found inside rar archive
« Reply #3 on: October 29, 2005, 12:51:57 PM »
If you submit the file to www.virustotal.com (which uses the Windows engine of avast!) - is it detected?

fLa

  • Guest
Re: Trojan not found inside rar archive
« Reply #4 on: October 29, 2005, 05:22:21 PM »
Avast do detect the file on virustotal, and CAT-QuickHeal reports it as (Suspicious) - DNAScan and ALL other report "no virus found"


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Trojan not found inside rar archive
« Reply #5 on: October 29, 2005, 06:41:59 PM »
How was I supposed to the the Chest and Alwil thingi? Where do I find the Chest?
Chest is a buttom on the avast! skin (the crossed bones).
There is safe to store infected items, right clicking one you can send it to Alwil for analysis (if you configure your smtp tab of settings too).
The best things in life are free.

fLa

  • Guest
Re: Trojan not found inside rar archive
« Reply #6 on: October 29, 2005, 07:20:09 PM »
Ohh, well allright, I liv in a no graphic world :-) Command line is my life :)

/fLa

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Trojan not found inside rar archive
« Reply #7 on: October 29, 2005, 10:04:52 PM »
Ohh, well allright, I liv in a no graphic world :-) Command line is my life :)
So run C:\Program Files\Alwil Software\Avast4\ashChest.exe
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: Trojan not found inside rar archive
« Reply #8 on: October 29, 2005, 10:44:04 PM »
Erm, Tech, I believe we're in the avast! 4 Linux forum here ;)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Trojan not found inside rar archive
« Reply #9 on: October 30, 2005, 01:59:25 AM »
Erm, Tech, I believe we're in the avast! 4 Linux forum here ;)
Ooopsss... that's the problem of the unread all posts link...
Sorry, I didn't notice it  :-[
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: Trojan not found inside rar archive
« Reply #10 on: November 07, 2005, 12:10:02 AM »
fLa, the archive was correctly unpacked and detected by the current internal version of avast!... could you please try the recent update?
Thanks.