Author Topic: About reports the viral sample  (Read 4479 times)

0 Members and 1 Guest are viewing this topic.

dengsa

  • Guest
About reports the viral sample
« on: April 03, 2008, 04:00:42 AM »
Avast is good, but we report the viral sample not to reply, like this can attack the enthusiasm which everybody reports. The hope can have the reply!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89353
  • No support PMs thanks
Re: About reports the viral sample
« Reply #1 on: April 03, 2008, 01:58:32 PM »
You will not normally receive a reply unless avast require more information.
I believe there should at least be an auto-responder email acknowledging receipt of the sample email, I have been suggesting this for an eternity.

How did you submit the sample ?
Did you also test the sample at virus total ?
VirusTotal - Multi engine on-line virus scanner and report the findings here. I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently over 30 different scanners.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: About reports the viral sample
« Reply #2 on: April 03, 2008, 02:53:58 PM »
I think like dengsa... what is the problem with an automatic answer? I see no reason to not adopt this solution, I think there is more pros than cons.
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89353
  • No support PMs thanks
Re: About reports the viral sample
« Reply #3 on: April 03, 2008, 03:05:38 PM »
And so do I as my post indicated.

I have been asking for some considerable time and it has fallen on deaf ears, which is a surprise considering the good developer contribution we have on the forums and how easy it would be to set up an auto responder.

An auto responder should at least let the avast user know it has been received and at the very least thank them for taking the time to submit the file.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

onlysomeone

  • Guest
Re: About reports the viral sample
« Reply #4 on: April 03, 2008, 05:55:07 PM »
I think like dengsa... what is the problem with an automatic answer? I see no reason to not adopt this solution, I think there is more pros than cons.

An auto responder should at least let the avast user know it has been received and at the very least thank them for taking the time to submit the file.

has anyone already put this on the wish-list?
that would be really nice  :D


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89353
  • No support PMs thanks
Re: About reports the viral sample
« Reply #5 on: April 03, 2008, 07:06:19 PM »
OH yes, but it is somewhat buried in 26 pages of posts (and that has been parred down. Not to mention the numerous topic I have contributed to and said this.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: About reports the viral sample
« Reply #6 on: April 03, 2008, 08:18:57 PM »
Kubecj, will you listen or not? ;D
The best things in life are free.

Thunder Bird

  • Guest
Re: About reports the viral sample
« Reply #7 on: April 04, 2008, 05:21:17 AM »
Avast is good, but we report the viral sample not to reply, like this can attack the enthusiasm which everybody reports. The hope can have the reply!

I like you submitted a viral sample but have not received any acknowledgement or information.

I now assume it is a waste of my time to submit samples in the future and will cease doing so.

This file was also uploaded to virustotal and AVG reported "Dropper.Delf.AIQ"
Ikarus reported "Behaves LikeWin32.ProcessHijack".

I detect a complete lack of interest in these samples as no one seems to get any feed back.

If anyone else is interested in looking at my sample let me know your Email address and I will forward same.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89353
  • No support PMs thanks
Re: About reports the viral sample
« Reply #8 on: April 04, 2008, 03:50:37 PM »
Whilst you might think it a waste of time, but if you don't send samples you will never know one way or the other.

The two detections on VT, I would say one 'behaves like' is some form of heuristics which could be wrong, which leaves one detection so that isn't a clear cut yes this is malware. Avast may well have analysed your sample and found it to be clean, unfortunately we would never know as a) we don't get an acknowledgement of receipt, nor b) confirmation that it was a virus/malware after analysis.

So you have to continually scan the sample to see if it is detected, not good as if they didn't receive it you don't know, nor if it is considered clean would you know. Only if it was malware and it was added to the VPS would you know and then only if you were periodically scanning the samples you sent.

I don't believe that is because they aren't interested (that isn't borne out in the forums), it is IMHO simply not good communication. When people are in the dark without information, they think the worst rather than the best.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: About reports the viral sample
« Reply #9 on: April 04, 2008, 05:21:40 PM »
I like you submitted a viral sample but have not received any acknowledgement or information.
That's not their policy, just that.

I now assume it is a waste of my time to submit samples in the future and will cease doing so.
Hey... the fact of not having an acknowledgment does not make useless... They do analyze your samples.

I detect a complete lack of interest in these samples as no one seems to get any feed back.
They answer (or try to) through the virus database update asap.
The best things in life are free.

Thunder Bird

  • Guest
Re: About reports the viral sample
« Reply #10 on: April 04, 2008, 06:03:05 PM »

The two detections on VT, I would say one 'behaves like' is some form of heuristics which could be wrong, which leaves one detection so that isn't a clear cut yes this is malware. Avast may well have analysed your sample and found it to be clean, unfortunately we would never know as a) we don't get an acknowledgement of receipt, nor b) confirmation that it was a virus/malware after analysis.

DavidR

All I know is that this particular file caused lots of problems with my computer and in the end the only way I could get rid of it was with a system restore.

I had a couple of problems about the same time and I believe this or one other files disabled Avast to gain entry. (I know that has now been fixed in 4.8 )

My computer clock was reset to 365 days earlier.
 
I had a graphic from this particular file appear middle screen on boot up and a file "winupdater" appeared in the system files. ("winupdater" was from this file or the other file that was found)

To me that's malware or a virus.

I found the other file when I opened a folder and Avast alerted me.

I then installed Avast 4.8 and did a full boot time scan (overnight) and found 2 more files.

with Win32:Trojan-gen {UPX}.

I'm not executing this file on my computer again after experiencing the previous problems.

But I do know what will happen if I do and that to me is the acid test regardless of the fact that all of the programs (except AVG & Ikarus) on Virus-total say nothing found.

I can send you a copy of the file to run on your computer to convince you if you still have doubts.

Al Will

  • Guest
Re: About reports the viral sample
« Reply #11 on: May 23, 2008, 11:43:26 PM »
I would just like to add that it is discouraging not to get some sort of reply after submitting a sample.

When I submit samples to another AV company which I wont name, I ALWAYS get an automated e-mail to say it was received and will be analysed.  If something is found, they often e-mail me again to say it will be added to the next update and thanks for submitting.  This makes me want to continue submitting to them.

I have just started trying Avast out and have submitted a few samples and so far the only thing can say that I would like to see improved is some sort of reply (automated or otherwise) after a submission.  Otherwise, it seems like a great program with a great online community.


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: About reports the viral sample
« Reply #12 on: May 24, 2008, 01:02:57 AM »
I would just like to add that it is discouraging not to get some sort of reply after submitting a sample.

When I submit samples to another AV company which I wont name, I ALWAYS get an automated e-mail to say it was received and will be analysed.  If something is found, they often e-mail me again to say it will be added to the next update and thanks for submitting.  This makes me want to continue submitting to them.

I have just started trying Avast out and have submitted a few samples and so far the only thing can say that I would like to see improved is some sort of reply (automated or otherwise) after a submission.  Otherwise, it seems like a great program with a great online community.
We already complain a lot about this... you're not alone... tons of other users think the same.
The best things in life are free.