avast free 5 bug

[Henrique - RJ]

Hello

After download avast not detect automatically trojan banker.

Only manually.

hxxp://www.arquitectura.jujuy.gov.ar/images/M_images/Dispositivo-de-Seguranca.exe

Do the test !

Thanks

[SafeSurf]

Sometimes we use online scanners:

Virus Total: http://www.virustotal.com/url-scan/report.html?id=214d669fd2bce6484f15ab91cc7dbead-1284510958  0/7

URL Void: http://vscan.urlvoid.com/analysis/f7c94c9f01e03c2d74ed31fe7131b6e9/ZGlzcG9zaXRpdm8tZGUtc2VndXJhbmNhLWV4ZQ==/ - CLEAN (including Avast)

Anubis: http://anubis.iseclab.org/?action=result&task_id=14bd29f889ab617d4117b65aa2de5240e - See detailed report

Sometimes people report things online scanners and then the AV companies add them to their definitions update, or this was done coincidently.  In any case, the site looks clean.

[Milos]

Hello

After download avast not detect automatically trojan banker.

Only manually.

hxxp://www.arquitectura.jujuy.gov.ar/images/M_images/Dispositivo-de-Seguranca.exe

Do the test !

Thanks

Hello,
avast! doesn't detect it at all (not automatically, nor manually). Detection will be added.

Best regards,
Milos

[RejZoR]

Interesting, haven't got anything positive from Comodo CIMA or Norman Sandbox. Also nothing on VT.

[Lisandro]

Interesting, haven't got anything positive from Comodo CIMA or Norman Sandbox. Also nothing on VT.

Unfortunately, trojan bankers are very common here in Brazil.
I'm surprised that the powerful Avira does not detect it

[Henrique - RJ]

I'm surprised that the powerful Avira does not detect it

Avira is not 100% detection. 

But I think avast is improving mainly due to the sending of samples by the world community and also its faster response. 

[Lisandro]

Avira is not 100% detection. 

Nobody is. But people usually say: "Oh, Avira has the best detection rate at all, it's perfect"...

But I think avast is improving mainly due to the sending of samples by the world community and also its faster response.

Good to know that.
Thanks for uploading samples and improve detection

[Henrique - RJ]

I have 10 phishing bankers pages files (captured only today) that avast did not detect (Avira detects almost all).

avast has a lot to improve ...   :'(

[Lisandro]

avast has a lot to improve ...   :'(

Sure. Again: nobody is perfect.
Well... There is one that is saying it's impenetrable...

[Henrique - RJ]

An example:

Fhishing site: hxxp://bradescohome-ru.1gb.ru/log/site/perfil/index.php

VirusTotal (browsers): http://www.virustotal.com/url-scan/report.html?id=7ced66fcaa88f82e04545ec23fcb5680-1284580727

VirusTotal (only Avira detection): http://www.virustotal.com/file-scan/report.html?id=839d18035736cc6e412bea74cf9d671721f3ffaf83b18d78e8726656fd6af9d0-1284587931

All my samples obtained from this site (user): http://www.phishtank.com/user_submissions.php?page=0&username=vmcosta

Hello,
avast! doesn't detect it at all (not automatically, nor manually). Detection will be added.

The cracker has changed the trojan banker (it's quick).

poor avast ...  :'(

[Lisandro]

Please, edit the hxxp://www.phishtank.com/ link!

[Henrique - RJ]

Please, edit the hxxp://www.phishtank.com/ link!

Why ?

No risk

[Lisandro]

Why ?
No risk

You're right. Sorry.

[Marc57]

Sometimes we use online scanners:

Virus Total: http://www.virustotal.com/url-scan/report.html?id=214d669fd2bce6484f15ab91cc7dbead-1284510958  0/7

URL Void: http://vscan.urlvoid.com/analysis/f7c94c9f01e03c2d74ed31fe7131b6e9/ZGlzcG9zaXRpdm8tZGUtc2VndXJhbmNhLWV4ZQ==/ - CLEAN (including Avast)

Anubis: http://anubis.iseclab.org/?action=result&task_id=14bd29f889ab617d4117b65aa2de5240e - See detailed report

Sometimes people report things online scanners and then the AV companies add them to their definitions update, or this was done coincidently.  In any case, the site looks clean.

I've been passing this around to the A/V vendors.

Now up to 13/43 on Virus Total.

http://www.virustotal.com/file-scan/report.html?id=dcec61143b788e7a340bc9c3e32bc6a5ef4fd1c6678377acc9fcdbfa5ee98934-1284619064

And 1/7
http://www.virustotal.com/url-scan/report.html?id=214d669fd2bce6484f15ab91cc7dbead-1284611853

Also sent to Malwarebytes

http://forums.malwarebytes.org/index.php?showtopic=62790

[SafeSurf]

@ Marc57,  Thanks.  Glad I could help with the scanning. 

@ Henrique - RJ,  I had an incident a few weeks ago when beta testing a FW on another machine...no it wasn't OA  :'(.  In any case, someone got through the FW while I was on a banking site and what saved me was PrevX w/SO http://www.prevx.com/safeonline.asp.  It is fully compatible with Avast and OA (all versions).  You can always trial it to see if you like it.  I have the settings for Self Protection and SafeOnline set to high and the others at default.  Let me know if you have any questions.  Thanks.