Author Topic: New Waledac virus/trojan unrecognized by Avast!  (Read 3514 times)

0 Members and 1 Guest are viewing this topic.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89034
  • No support PMs thanks
Re: New Waledac virus/trojan unrecognized by Avast!
« Reply #1 on: July 05, 2009, 04:47:03 PM »
Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic and scan results pages might help and undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

rolloLG

  • Guest
Re: New Waledac virus/trojan unrecognized by Avast!
« Reply #2 on: July 05, 2009, 04:54:55 PM »
There are at least 16 variants of this virus though.
Avast team should read the link above and try to download at least 5-6 variants to find a good pattern...
1 upped file is not enough

Ok, I've added some comments with links using the Chest upload feature...
« Last Edit: July 05, 2009, 04:59:05 PM by hexaae »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: New Waledac virus/trojan unrecognized by Avast!
« Reply #3 on: July 05, 2009, 04:57:55 PM »
Hi hexaae,

Chinese authorities refuse to cooperate.
According to security expert Gary Warner this problem is partly caused by a Chinese domain registrar that does not want to cooperate with other parties to close down certain Waledac domain names. There is no reaction to either Chinese or UK requests to do so, so the botnet has been using certain domainnames undisturbed for months now.

For these kind of threats it is always a good idea to accompany avast with specific free anti-malware non-resident scanning programs like MBAM and SAS that certainly have the latest protection against Waledac,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

rolloLG

  • Guest
Re: New Waledac virus/trojan unrecognized by Avast!
« Reply #4 on: July 05, 2009, 05:00:08 PM »
Interesting... thank you.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89034
  • No support PMs thanks
Re: New Waledac virus/trojan unrecognized by Avast!
« Reply #5 on: July 05, 2009, 07:48:14 PM »
There are at least 16 variants of this virus though.
Avast team should read the link above and try to download at least 5-6 variants to find a good pattern...
1 upped file is not enough

Ok, I've added some comments with links using the Chest upload feature...

Thanks for trying to improve detections.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security