Author Topic: Samples missed by avast (VirusTotal links only!)  (Read 414217 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Samples missed by avast (VirusTotal links only!)
« on: September 20, 2010, 01:45:21 PM »
As my first thread get hijacked and closed without even warning me :P, I'm starting a new one trying to help avast improving detection if possible.
Please, post only VirusTotal links and do not post links to malware!
You can always submit a sample through Chest or zip it and send to virus(at)avast(dot)com.

Watching this thread means an out of bound work for our analysts, therefore the links should provide an additional information.. you should always know why exactly the link posted by you has a bigger priority than samples sorted out by our internal systems, otherwise it's a waste of time on both sides... you can write a script for browsing virustotal results and posting them here, but what will be their benefit for us? we'll receive the files and metadata anyway from virustotal (on a regular basis of sample submission) so it means an extra manual work that duplicates what a machine does for us.

Guideline for posting links which make some sense:

1. you know the origin/behavior/way of spreading of the sample (it comes from a machine that you recently disinfected e.g.)
2. the sample is not an adware, toolbar or such low-risk malware/PUP
3. you're able to write related metadata either to VT comments or here
« Last Edit: October 05, 2010, 12:22:28 AM by Tech »
The best things in life are free.





Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
The best things in life are free.




Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: Samples missed by avast (VirusTotal links only!)
« Reply #9 on: September 22, 2010, 05:56:37 PM »
New nagware / rogue, NavaShield ( navashield.com )  see video http://www.youtube.com/watch?v=0hxFyDpfcg0
Malwarebytes / Ad-Aware / F-Secure have added detection, 53mb installer
« Last Edit: September 22, 2010, 06:21:15 PM by Pondus »


Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
« Last Edit: September 23, 2010, 09:11:49 AM by Marc57 »
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!

Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
« Last Edit: September 24, 2010, 07:50:21 AM by Marc57 »
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!


Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
« Last Edit: September 25, 2010, 08:43:16 AM by Marc57 »
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!