Author Topic: Crypt0L0cker  (Read 17271 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Crypt0L0cker
« on: July 19, 2015, 10:44:08 PM »
I experienced Crypt0L0cker and even if thanks to a full backup I didn't had any damage. I then made some test on a test pc and I found Avast Free is the only AV that does not intercept this ransomware that could create so many damages. Bitdefender, Kaspesky, Nod32, AVG, Avira they all intercept Crypt0L0cker, Avast no.
Avast used to be my favorite and as I am a supporting tech I've installed it on about 100 pc and untill now I was so pleased so happy now I'm not more and I'm gonna unistall Avast everywhere.
That's a big big fail!
« Last Edit: July 19, 2015, 10:46:22 PM by andrea.tamponi »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Crypt0L0cker
« Reply #1 on: July 19, 2015, 10:47:21 PM »
avast does recognize several versions of CryptoLocker.
avast also detects things that others don't.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Crypt0L0cker
« Reply #2 on: July 19, 2015, 10:48:32 PM »
New versions of cryptolocker are released evry week


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Crypt0L0cker
« Reply #3 on: July 19, 2015, 10:55:42 PM »
Make the link not clickable.
We do not want visitors of this webboard opening malicious websites.

Prove that avast does detect it:
https://www.avast.com/virus-update-history
« Last Edit: July 19, 2015, 10:58:53 PM by Eddy »

REDACTED

  • Guest
Re: Crypt0L0cker
« Reply #4 on: July 19, 2015, 11:12:43 PM »
Make the link not clickable.
We do not want visitors of this webboard opening malicious websites.

Prove that avast does detect it:
https://www.avast.com/virus-update-history

Have a try with that link on a PC with the latest AVAST update and you won't tell this. I've been testing all day long. Avast fail that's it and as I've the proof you cannot convince me.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Crypt0L0cker
« Reply #5 on: July 19, 2015, 11:19:35 PM »
as i said above new versions comes out regulary and no security program have 100% detection

report it here  https://support.avast.com  >  avast virus lab

edit your post above and change http to hxxp ... this will make the link unclickable





« Last Edit: July 19, 2015, 11:21:58 PM by Pondus »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Crypt0L0cker
« Reply #6 on: July 19, 2015, 11:58:28 PM »
I removed the live link to Cryptolocker malware.
It was taking too long for the Mods to make the link non clickable.
Better safe than sorry. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: Crypt0L0cker
« Reply #7 on: July 20, 2015, 12:07:16 PM »
I cannot understand how can you go with statement like this: you have a new version of Crypt0L0cker every week and multiple of them and so who cares if Avast can't catch them all!
You're out of what it's supposed an Antivirus does: protect for whatever can damage you.
Crypt0L0cker can do big big damages and if you are good with that risk I'm not.
I experienced through a complete set of test using a PC that I have installed for the purpose.
I created a cloning image to restore back whenever Crypt0L0cker won over the Antivirus.
I found Avast, Avira and Panda failed. Bitdefender, Symantec, Nod32, AVG don't.
Tell me why should I go with Avast if it doesn't block a so harmful ransomware. I should be crazy.
Until you experience the same problem, but at that time it would be to late, you can keep pushing for Avast.
If I were an Avast friend I would try to understand why it failed and I would fix it and for sure I will not say you have a new version of Crypt0L0cker every week and multiple of them and so who cares.
I will wait the news Avast fixed it, until that time I changed my Antivirus with one working on that problem.

REDACTED

  • Guest
Re: Crypt0L0cker
« Reply #8 on: July 20, 2015, 12:45:41 PM »
Actually, many cryptolockers born as "undetected"  by any vendor. If you are a virus wirter, you want your sample undetected by any vendor. So we need prevention here. Avast has some features to prevent 0-day threats. Deepscreen, Hardened Mode and nowadays HIPS.
They can also fail. So what will happen ? You will probably infected with cryptolocker and you will lost your files.
I suggest you that do not trust any antivirus and do not be a supporter of any antivirus. Use softwares that build on more prevention not detection. You can maybe use anti-executables or you can use sandbox technology (also available in avast paid versions)
These are will save you. I think you are a techie guy and you know which file looks malicious or not.
Please use your common sense before running any file on your PC.
and remember that "Every virus born as undetected, we need prevention not detection"

Sincerely,
yigido

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Crypt0L0cker
« Reply #9 on: July 20, 2015, 01:01:50 PM »
Quote
I cannot understand how can you go with statement like this: you have a new version of Crypt0L0cker every week and multiple of them and so who cares if Avast can't catch them all!
did anyone above say we dont care?

i gave you a link above where to report undetected samples


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Crypt0L0cker
« Reply #10 on: July 20, 2015, 01:18:04 PM »
The OP seems to be focused on just this one malware sample, but is forgetting about other things.
As I have said, avast does detect things that others don't and visa versa.

Being safe to this malware sample and using a other av means you will be vulnerable to other malware that avast protect you against.

REDACTED

  • Guest
Re: Crypt0L0cker
« Reply #11 on: July 20, 2015, 01:23:18 PM »
The OP seems to be focused on just this one malware sample, but is forgetting about other things.
As I have said, avast does detect things that others don't and visa versa.

Being safe to this malware sample and using a other av means you will be vulnerable to other malware that avast protect you against.
It is detection. On some cases Avast can detect, on other many samples "A" antivirus can detect. So this history will never end.
There is no 100% detection exist. Protection is not equal to detection.
This user needs prevention against unknown threat. You guys give him a "Virus submission form" to submit his undetected sample. Why?
If he already know its a threat, why he needs Avast or any other Antivirus then? If he can decide which is malware or which is safe. He is a security product himself  ;) Why he needs Avast?
The user wants to ask something different in my huble opinion.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Crypt0L0cker
« Reply #12 on: July 20, 2015, 01:44:33 PM »
Quote
You guys give him a "Virus submission form" to submit his undetected sample. Why?
i am an avast user just like you .... what else should i give him?


for protection there is a tool   CryptoPrevent  https://www.foolishit.com/cryptoprevent-malware-prevention/
it also needs updates, meaning it does not detect/protect 100% 



« Last Edit: July 20, 2015, 01:47:02 PM by Pondus »

REDACTED

  • Guest
Re: Crypt0L0cker
« Reply #13 on: July 20, 2015, 01:47:43 PM »
Quote
You guys give him a "Virus submission form" to submit his undetected sample. Why?
i am an avast user just like you .... what else should i give him?


for protection there is a tool   CryptoPrevent  https://www.foolishit.com/cryptoprevent-malware-prevention/
This is Avast's job, to collect samples. I am a user too and believe me I send many samples to vendors in every day  ;)
at these words, my goal was not bad. Please do not misundertsand me.

Offline SpeedyPC

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3398
  • Avast shall conquer the whole world
Re: Crypt0L0cker
« Reply #14 on: July 20, 2015, 01:49:57 PM »

for protection there is a tool   CryptoPrevent  https://www.foolishit.com/cryptoprevent-malware-prevention/

I strongly advise you to installed CryptoPrevent above this quote post by Pondus, because they work great together with Avast, MBAM & MCShield ;)
Gigabyte 670 LGA1200 Full ATX MB | Intel Core i9-13900 CPU/LGA 1700 | GeForce Nvidia RTX-4070/12GB | 32GB DDR4 | 2 x 1TB Samsung SSD | W11 Home 64bit | Avast Premium v23.11.6090 | Avast SecureLine VPN | Avast Secure Browser | Avast Driver Updater | Avast BreachGuard | Firefox 64bit | MalwareBytes Premium | Adguard Premium | CCleaner Portable | Macrium Reflect | 7-Zip