Avast completetly ignoring Teslacrypt.

[Lotan]

thanks so its all in the registries then. I just hope it doesnt affect anything legit i try and install at later dates

[REDACTED]

Imho Avast should implement some specific kind of cryptoware prevention as Bitdefender did in their latest version. Recently I'm seeing too many samples of this kind of malware missed by Avast. It is true you can install something like cryptoprevent, but however Avast should offer better protection by itself.

[bob3160]

Imho Avast should implement some specific kind of cryptoware prevention as Bitdefender did in their latest version. Recently I'm seeing too many samples of this kind of malware missed by Avast. It is true you can install something like cryptoprevent, but however Avast should offer better protection by itself.

You seem to forget that the infection or Malware always comes first and protection comes second. It's always a catch up game.
The first part of staying safe starts with your own ability not to click on every link you see. That may be a bit blunt but, most people are their own worst enemies.

[REDACTED]

I totally agree with you, but why Avast can't implement a defence mechanism like cryptoprevent or bitdefender cryptowall immunizer? It shouldn't be so hard...

[bob3160]

No arguments. I agree but,that's a question for Avast to answer.

[Eddy]

It shouldn't be so hard...

If it wouldn't be so hard, every av vendor (and others) would already have created the perfect protection against it.

The largest problem is that users don't know nor bother to learn how to handle a computer (hardware/software) even near decent when it comes to security.
I would be very rich in a real short time if e.g. everyone who is using a account with administrator rights while there is no need for it give me $0,01 each time they do so.

[Milos]

Hello,
yes, we have some ideas. They are waiting for implementation and testing.

Milos

[bob3160]

Hello,
yes, we have some ideas. They are waiting for implementation and testing.

Milos

Thanks for the reply.
(Buying FoolishIT would make it quicker. )

[REDACTED]

Hello,
yes, we have some ideas. They are waiting for implementation and testing.

Milos

Thank you! This is a good news.

[REDACTED]

Just out of curiosity - shouldn't Deepscreen pickup any ransomware?  With the ransomware starts, Avast should Deepscreen it and watch what it's doing to the virtual environment.  Once it sees cryptography going on, it warns the user that it may be unsafe - the user can then terminate it.

Or am I off base on that?

[Milos]

Hello,
yes it should, but not every ransomware encrypt files immediately after execution.

Milos

[Eddy]

In addition to what Milos said.

No mather what part of avast is used to detect the encryption malware,
there is also the "problem" that it shouldn't react on legitimate encryption tools like (e.g.) GNU privacy Guard and 7zip

[REDACTED]

I can confirm that.
Avast completely ignored Teslacrypt and other Ransomware. For last two months I have four confirmed cases with different clients running AVAST PRO. The last one is from yesterday. Not detected Teslacrypt 3, even after files being encrypted with extension mp3. All info is gone !!!

[Eddy]

You are wrong.
avast doesn't completely ignore encryption malware.
It can and will detect certain versions of it as has already been told.

Sure there is always room for better detection and as Milos said, avast is already working on it.

[PureITy]

We had a customer yesterday where Avast Endpoint Protection Suit Plus, failed to detect TeslaCrypt, thus infecting one PC and encrypting all data stored on the company's server shared data. Thank god there was a backup!

Why did this malware not get detected?