Author Topic: Why don't you add definitions for undetected viruses?  (Read 16559 times)

0 Members and 1 Guest are viewing this topic.

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:Why don't you add definitions for undetected viruses?
« Reply #15 on: April 02, 2004, 06:23:32 PM »
I sent them 2 days ago..
any news guys  ::)
MW

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:Why don't you add definitions for undetected viruses?
« Reply #16 on: April 03, 2004, 02:58:12 PM »
the virus guys corrected the detection, except for one file ;D ;D  . it is not detected by avast4  ::) :-\
« Last Edit: April 03, 2004, 02:59:05 PM by minacross »
MW

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Why don't you add definitions for undetected viruses?
« Reply #17 on: April 03, 2004, 03:00:29 PM »
And there is still many more... i'm checking those submited files after every VPS update and still nothing.
Visit my webpage Angry Sheep Blog

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:Why don't you add definitions for undetected viruses?
« Reply #18 on: April 03, 2004, 03:04:49 PM »
this is what I mean  :-\
BTW, I already sent the file to virusataswdotcz
MW

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:Why don't you add definitions for undetected viruses?
« Reply #19 on: April 03, 2004, 07:00:02 PM »
this is so wierd that alwil team has not done anything to fix this yet. so unlike them
"People who are really serious about software should make their own hardware." - Alan Kay

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:Why don't you add definitions for undetected viruses?
« Reply #20 on: April 08, 2004, 04:18:34 PM »
avast added the detection of the other 2 trojans in the following updates:

VPS 0403-22, 31.03.2004
JS:Exploit-Bytverify-7, JS:Exploit-Bytverify-8, JS:OpenConnection-B, JS:Shinwow
VPS 0404-3, 06.04.2004
JS:Beyond-B, JS:Gummy [Trj]

why didn't alwil send me an e-mail to tell me that instead of adding the silently?  ::) ???
I sent them to CA and they sent me an email the next day to inform me that they added the detection of these trojans to thier virus db:
_____________________________________________________________________________

Dear Mina Guindy,

This is to notify you of the results of your submission, issue number
314388.

With regards to the file "Beyond.class" submitted by you on 05 Apr
02:39:42 (Australian Eastern Standard Time), we have added detection
for Java/ByteVerify.Trojan to the signature files for the InoculateIT
engine.

The Compiled JAVA Class file "Beyond.class" has been determined to be
malicious. The file has been identified as Java.Shinwow.N trojan.

Aliases reported by other AV products are listed here:
(TrojanDownloader.Java.OpenConnection.e) (Exploit-ByteVerify)

CA antivirus products address this malware as follows:
------------------------------------------------------
eTrust Antivirus 6.x/v7 (Vet Engine)
    Engine                Update version        Last Update          
    11.4.0                11.4.8257             05 Apr                

eTrust Antivirus 6.x/v7 (InoculateIT Engine)
    Engine                Update version        Last Update          
    23.64.0               23.64.61              06 Apr      

_____________________________________________________________________________

« Last Edit: April 08, 2004, 05:05:17 PM by minacross »
MW

kareld

  • Guest
Re:Why don't you add definitions for undetected viruses?
« Reply #21 on: April 08, 2004, 05:59:46 PM »
Hi minacross, you found that Avast detects your files when I was checking your files from the mail and searching for when the signatures were added.

We usually don't answer on virus submissions if not required explicitelly. As Pavel wrote, the number of contributed files is high.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Why don't you add definitions for undetected viruses?
« Reply #22 on: April 08, 2004, 06:18:37 PM »
I understand this,but still there were added only two undetected viruses from my archive. Whats with the rest?
Visit my webpage Angry Sheep Blog

TC17

  • Guest
Re:Why don't you add definitions for undetected viruses?
« Reply #23 on: April 23, 2004, 05:46:39 AM »
I understand this,but still there were added only two undetected viruses from my archive. Whats with the rest?
I also recently sent in a "prorat" trojan that the Avast authors have not added.  That was over a week ago.  Several other virus scanners did detect it, but Avast didn't.  

In fact when I first emailed it my ISP sent Avast an email stating the file was infected with a trojan... Avast then sent me another email asking me to password protect it which I did and re-email it.

This is very discouraging to me, as how can I have faith in using your virus scanner when you won't add legitimate trojan detection when people send them in?  Some virus program have it listed as medium to high for severity also.

Although Avast is not alone, I also emailed a different trojan to Etrust that their software didn't pick up, and they too replied stating that it was a trojan, yet never added it to their updates either.

Funny thing is that the free AVG virus scanner picked up both of those two trojans.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Why don't you add definitions for undetected viruses?
« Reply #24 on: April 23, 2004, 06:58:52 AM »
Yeah i got the same thinking. You must understand that Alwil guys are working really hard,but i want to improve detection even more,because you get trust with this. Peoples will say wow avast! picked viruses that Pc-cillin or Panda missed (even if its some non important virus/worm) and they'll probably switch to avast!. Its very simple and i see this every day.
Visit my webpage Angry Sheep Blog