Author Topic: Crypt0L0cker  (Read 13471 times)

0 Members and 1 Guest are viewing this topic.

Offline andrea.tamponi

  • Jr. Member
  • **
  • Posts: 21
Crypt0L0cker
« on: July 19, 2015, 10:44:08 PM »
I experienced Crypt0L0cker and even if thanks to a full backup I didn't had any damage. I then made some test on a test pc and I found Avast Free is the only AV that does not intercept this ransomware that could create so many damages. Bitdefender, Kaspesky, Nod32, AVG, Avira they all intercept Crypt0L0cker, Avast no.
Avast used to be my favorite and as I am a supporting tech I've installed it on about 100 pc and untill now I was so pleased so happy now I'm not more and I'm gonna unistall Avast everywhere.
That's a big big fail!
« Last Edit: July 19, 2015, 10:46:22 PM by andrea.tamponi »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Crypt0L0cker
« Reply #1 on: July 19, 2015, 10:47:21 PM »
avast does recognize several versions of CryptoLocker.
avast also detects things that others don't.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36680
Re: Crypt0L0cker
« Reply #2 on: July 19, 2015, 10:48:32 PM »
New versions of cryptolocker are released evry week


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Crypt0L0cker
« Reply #3 on: July 19, 2015, 10:55:42 PM »
Make the link not clickable.
We do not want visitors of this webboard opening malicious websites.

Prove that avast does detect it:
https://www.avast.com/virus-update-history
« Last Edit: July 19, 2015, 10:58:53 PM by Eddy »

Offline andrea.tamponi

  • Jr. Member
  • **
  • Posts: 21
Re: Crypt0L0cker
« Reply #4 on: July 19, 2015, 11:12:43 PM »
Make the link not clickable.
We do not want visitors of this webboard opening malicious websites.

Prove that avast does detect it:
https://www.avast.com/virus-update-history

Have a try with that link on a PC with the latest AVAST update and you won't tell this. I've been testing all day long. Avast fail that's it and as I've the proof you cannot convince me.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36680
Re: Crypt0L0cker
« Reply #5 on: July 19, 2015, 11:19:35 PM »
as i said above new versions comes out regulary and no security program have 100% detection

report it here  https://support.avast.com  >  avast virus lab

edit your post above and change http to hxxp ... this will make the link unclickable





« Last Edit: July 19, 2015, 11:21:58 PM by Pondus »

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 43689
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Crypt0L0cker
« Reply #6 on: July 19, 2015, 11:58:28 PM »
I removed the live link to Cryptolocker malware.
It was taking too long for the Mods to make the link non clickable.
Better safe than sorry. :)
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.3.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline andrea.tamponi

  • Jr. Member
  • **
  • Posts: 21
Re: Crypt0L0cker
« Reply #7 on: July 20, 2015, 12:07:16 PM »
I cannot understand how can you go with statement like this: you have a new version of Crypt0L0cker every week and multiple of them and so who cares if Avast can't catch them all!
You're out of what it's supposed an Antivirus does: protect for whatever can damage you.
Crypt0L0cker can do big big damages and if you are good with that risk I'm not.
I experienced through a complete set of test using a PC that I have installed for the purpose.
I created a cloning image to restore back whenever Crypt0L0cker won over the Antivirus.
I found Avast, Avira and Panda failed. Bitdefender, Symantec, Nod32, AVG don't.
Tell me why should I go with Avast if it doesn't block a so harmful ransomware. I should be crazy.
Until you experience the same problem, but at that time it would be to late, you can keep pushing for Avast.
If I were an Avast friend I would try to understand why it failed and I would fix it and for sure I will not say you have a new version of Crypt0L0cker every week and multiple of them and so who cares.
I will wait the news Avast fixed it, until that time I changed my Antivirus with one working on that problem.

Offline yigido

  • Jr. Member
  • **
  • Posts: 41
Re: Crypt0L0cker
« Reply #8 on: July 20, 2015, 12:45:41 PM »
Actually, many cryptolockers born as "undetected"  by any vendor. If you are a virus wirter, you want your sample undetected by any vendor. So we need prevention here. Avast has some features to prevent 0-day threats. Deepscreen, Hardened Mode and nowadays HIPS.
They can also fail. So what will happen ? You will probably infected with cryptolocker and you will lost your files.
I suggest you that do not trust any antivirus and do not be a supporter of any antivirus. Use softwares that build on more prevention not detection. You can maybe use anti-executables or you can use sandbox technology (also available in avast paid versions)
These are will save you. I think you are a techie guy and you know which file looks malicious or not.
Please use your common sense before running any file on your PC.
and remember that "Every virus born as undetected, we need prevention not detection"

Sincerely,
yigido

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36680
Re: Crypt0L0cker
« Reply #9 on: July 20, 2015, 01:01:50 PM »
Quote
I cannot understand how can you go with statement like this: you have a new version of Crypt0L0cker every week and multiple of them and so who cares if Avast can't catch them all!
did anyone above say we dont care?

i gave you a link above where to report undetected samples


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Crypt0L0cker
« Reply #10 on: July 20, 2015, 01:18:04 PM »
The OP seems to be focused on just this one malware sample, but is forgetting about other things.
As I have said, avast does detect things that others don't and visa versa.

Being safe to this malware sample and using a other av means you will be vulnerable to other malware that avast protect you against.

Offline yigido

  • Jr. Member
  • **
  • Posts: 41
Re: Crypt0L0cker
« Reply #11 on: July 20, 2015, 01:23:18 PM »
The OP seems to be focused on just this one malware sample, but is forgetting about other things.
As I have said, avast does detect things that others don't and visa versa.

Being safe to this malware sample and using a other av means you will be vulnerable to other malware that avast protect you against.
It is detection. On some cases Avast can detect, on other many samples "A" antivirus can detect. So this history will never end.
There is no 100% detection exist. Protection is not equal to detection.
This user needs prevention against unknown threat. You guys give him a "Virus submission form" to submit his undetected sample. Why?
If he already know its a threat, why he needs Avast or any other Antivirus then? If he can decide which is malware or which is safe. He is a security product himself  ;) Why he needs Avast?
The user wants to ask something different in my huble opinion.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36680
Re: Crypt0L0cker
« Reply #12 on: July 20, 2015, 01:44:33 PM »
Quote
You guys give him a "Virus submission form" to submit his undetected sample. Why?
i am an avast user just like you .... what else should i give him?


for protection there is a tool   CryptoPrevent  https://www.foolishit.com/cryptoprevent-malware-prevention/
it also needs updates, meaning it does not detect/protect 100% 



« Last Edit: July 20, 2015, 01:47:02 PM by Pondus »

Offline yigido

  • Jr. Member
  • **
  • Posts: 41
Re: Crypt0L0cker
« Reply #13 on: July 20, 2015, 01:47:43 PM »
Quote
You guys give him a "Virus submission form" to submit his undetected sample. Why?
i am an avast user just like you .... what else should i give him?


for protection there is a tool   CryptoPrevent  https://www.foolishit.com/cryptoprevent-malware-prevention/
This is Avast's job, to collect samples. I am a user too and believe me I send many samples to vendors in every day  ;)
at these words, my goal was not bad. Please do not misundertsand me.

Offline SpeedyPC

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3280
  • Avast shall conquer the whole world
Re: Crypt0L0cker
« Reply #14 on: July 20, 2015, 01:49:57 PM »

for protection there is a tool   CryptoPrevent  https://www.foolishit.com/cryptoprevent-malware-prevention/

I strongly advise you to installed CryptoPrevent above this quote post by Pondus, because they work great together with Avast, MBAM & MCShield ;)
ASUS G75VX-T4153H - Avast Premium v20.1.2397 - W8.1 64bit - Avast SecureLine VPN - Avast Secure Browser - Firefox 64bit - Thunderbird 64bit - MBAM Premium - Adguard Premium - CryptoPrevent Premium - Privacy Eraser - MCShield - WinPatrol PLUS - Macrium Reflect Home Edition