Author Topic: Too much for me!  (Read 14474 times)

0 Members and 1 Guest are viewing this topic.

wetabax

  • Guest
Re: Too much for me!
« Reply #15 on: November 22, 2007, 06:09:10 PM »
In virus@avast.com was 4 emails from you. Without duplicity 4 files only. Now are 3 of them detected (see scan report bellow). The last one is HTML page tim_foto2007.com without suspicious scripts.

If you have some other samples, that are not detected, please send it to virus@avast.com

*
* avast! Report
* This file is generated automatically
*
* Task 'aswcmd.exe' used
* Started on 20. listopad 2007 12:42:36
* VPS: 071119-1, 20.11.2007
*

CardMsN.exe\[ASPack] [L] Win32:Banload-CVQ [trj] (0)
foto07_euevc.jpg_-_Tipo_-_Imagem_JPEG_.sCR\[PECompact] [L] Win32:Agent-MLS [trj] (0)
vivo.exe [L] Win32:Trojan-gen {Other} (0)
Infected files: 3
Total files: 7
Total folders: 1
Total size: 915,8 KB

*
* Task stopped: 20. listopad 2007 12:42:36
* Run-time was 0 second(s)
*

I don't know what is happening. Now I have my avast! 4.7.1074 and VPS 071122-0 and none of the nine samples I have in my computer are detected from avast. It's absolutelly the same if I extract them to a temp folder and then scan or if I scan into CHEST. Result is: no virus in ALL OF THEM.
Something more: checking YOUR list with my in CHEST, I noted that all these virus you mentioned are really old samples! After that, I sent a lot of other ones! See image in http://forum.avast.com/index.php?topic=31461.msg262675#msg262675 - you can see that none of the virus names there, are the same as these one you mentioned. So, I only can supose, that none of the nine samples arrived to avast! - so, again, if I sent them via CHEST as IMAP, as SMTP, and sent them directly to virus@avast.com  - do you have any other idea how to make all these 9 virus arrive to your labor? (I can upload them into my ftp site, for instance, or put there in www.4shared.com, but well, almost unbeliavable situation this one, don't you think?
« Last Edit: November 22, 2007, 06:16:08 PM by wetabax »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Too much for me!
« Reply #16 on: November 23, 2007, 01:24:06 AM »
I only can supose, that none of the nine samples arrived to avast! - so, again, if I sent them via CHEST as IMAP, as SMTP, and sent them directly to virus@avast.com  - do you have any other idea how to make all these 9 virus arrive to your labor? (I can upload them into my ftp site, for instance, or put there in www.4shared.com, but well, almost unbeliavable situation this one, don't you think?
I hope the virus analysts choose an alternate method to check your samples, but do something!
The best things in life are free.

wetabax

  • Guest
Re: Too much for me!
« Reply #17 on: November 23, 2007, 02:27:13 PM »
The nine virus from yesterday, are still eleven today. All of them with images from the VirusTotal LOG file. If someone is interested in the log files (jpeg) I can send them.

Jem

  • Guest
Re: Too much for me!
« Reply #18 on: November 24, 2007, 06:18:47 PM »
Well this is too depressing. Came back here to see what was happening, and I see that the biggest complaint about Alwil is still valid. They cannot balance on the ball...  ???

Shame.

Offline Maxx_original

  • Avast team
  • Super Poster
  • *
  • Posts: 1479
Re: Too much for me!
« Reply #19 on: November 25, 2007, 12:27:05 AM »
send the files directly to trs@avast.com in this particular case... i don't know what (and where) did you send, but this should solve your problem... we already detect all the files that we were able to find in virus[at]avast box, just like misak wrote..

wetabax

  • Guest
Re: Too much for me!
« Reply #20 on: November 25, 2007, 04:04:04 PM »
sent all 11 virus to mentioned address above.

wetabax

  • Guest
Re: Too much for me!
« Reply #21 on: November 29, 2007, 05:33:29 PM »
sent all 11 virus to mentioned address above.

today, 4 days after I sent 11 virus, new scan. All 11 files, CLEAN!!! THIS is avast! that protects your computer.

I think avast! didn't realize that the best crackers in the world are brazilians, producing virus as they produces good football players. C'mon avast! help us!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Too much for me!
« Reply #22 on: November 29, 2007, 06:12:46 PM »
No excuses...
The best things in life are free.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Too much for me!
« Reply #23 on: November 29, 2007, 06:33:03 PM »
The only excuse I can think of is that someone/something is blocking the emails en route.
Maybe it would be easier / more reliable to upload the samples (compressed to a single archive) to our ftp site.

Cheers
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Too much for me!
« Reply #24 on: November 29, 2007, 06:36:06 PM »
our ftp site.
Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).
The best things in life are free.

wetabax

  • Guest
Re: Too much for me!
« Reply #25 on: November 29, 2007, 06:43:23 PM »
The only excuse I can think of is that someone/something is blocking the emails en route.
Maybe it would be easier / more reliable to upload the samples (compressed to a single archive) to our ftp site.

Cheers
Vlk
Not the fact. I received email from TRS himself, "Thank you for samples. I make string detection today and on Wednesday (after test to avoid false positive alerts) will be distributed. I am sorry for delay, i haven't Internet access during weekend." - so, they received the packet.
« Last Edit: November 30, 2007, 01:14:49 AM by wetabax »

Offline Maxx_original

  • Avast team
  • Super Poster
  • *
  • Posts: 1479
Re: Too much for me!
« Reply #26 on: November 29, 2007, 10:42:46 PM »
sorry again for that annoying situation... there are two days without VPS update, if i'm right... detection for your samples is still queued probably.. i will tell you tomorrow when the right VPS comes out..

wetabax

  • Guest
Re: Too much for me!
« Reply #27 on: November 30, 2007, 01:17:08 AM »
sorry again for that annoying situation... there are two days without VPS update, if i'm right... detection for your samples is still queued probably.. i will tell you tomorrow when the right VPS comes out..
VPS 071129-0 and nothing happens... (check again tomorow)

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re: Too much for me!
« Reply #28 on: November 30, 2007, 03:59:11 AM »
wetabax it's possible for You to upload these files somewhere and let some of us take look ?
(e.g. send me/others the link in PM) ...



https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline misak

  • Avast team
  • Sr. Member
  • *
  • Posts: 234
    • Personal page (CZE)
Re: Too much for me!
« Reply #29 on: November 30, 2007, 08:29:34 AM »
VPS 071129-0 and nothing happens... (check again tomorow)

Detection for samples, that you are send me to trs [at] avast [dot] com and uploaded to http://cambur.4shared.com/ is done. Here are the scan log from internal VPS:

*
* avast! Report
* This file is generated automatically
*
* Task 'aswcmd.exe' used
* Started on 30. listopad 2007 8:19:52
* VPS: internal, 30.11.2007
*

C:\Vzorky\urgent\virus.zip.out\amizade.com\[NsPack] [L] Win32:VB-GCA [Wrm] (0)
C:\Vzorky\urgent\virus.zip.out\DSC00129.scr [L] Win32:Agent-NZI [Rtk] (0)
C:\Vzorky\urgent\virus.zip.out\FlashPlayer09.exe\[PECompact] [L] Win32:Banload-DDJ [trj] (0)
C:\Vzorky\urgent\virus.zip.out\FotosZip.exe [L] Win32:Agent-NYY [trj] (0)
C:\Vzorky\urgent\virus.zip.out\humor.exe\[PECompact] [L] Win32:Banker-CWZ [trj] (0)
C:\Vzorky\urgent\virus.zip.out\kl.exe [L] Win32:Banker-CWY [trj] (0)
C:\Vzorky\urgent\virus.zip.out\Projeto_vivo.exe\[PECompact] [L] Win32:Banload-DDK [trj] (0)
C:\Vzorky\urgent\virus.zip.out\systray.exe [L] Win32:Banload-DDL [trj] (0)
C:\Vzorky\urgent\virus.zip.out\VivoCupidoMSG.exe [L] Win32:Delf-GVS [trj] (0)
C:\Vzorky\urgent\virus.zip.out\WLMessagerSecurity.exe [L] Win32:Delf-GVR [trj] (0)
Infected files: 10
Total files: 17
Total folders: 1
Total size: 15,2 MB

*
* Task stopped: 30. listopad 2007 8:19:53
* Run-time was 1 second(s)
*

File total.recorder.v5-patch.exe is keygen for application and infection free.

VPS update will be today distributed.