Samples missed by avast (VirusTotal links only!)

[PaCKINheAT]

suspicious http://www.virustotal.com/file-scan/report.html?id=a8e30a4da9360ec5350668beaf5e987d7ca60b0c7a68a4814daca11d62a4c99e-1294314942

[DavidR]

nice list

But a pretty pointless one as no one goes back and edits their posts when the malware sample is detected.

The links are of no use to avast, only physical samples can be analysed, so just send those to avast.

[chabbo]

one more problem are


i have See real malware on virustotal links but ppl Say its goodware just for lure other ppl,

[DavidR]

Are you really ready believe these anonymous people that you haven't a clue of their experience or intent, trust the weight of independent AV scanners rather anonymous comments.

[goodjohn1984]

Possible Java Malware:

http://www.virustotal.com/file-scan/report.html?id=ddfa23f9459b18b258f488fe0c06d66d5b7177e0f5325e72fde365df9ca8b30e-1297551741

http://camas.comodo.com/cgi-bin/submit?file=ddfa23f9459b18b258f488fe0c06d66d5b7177e0f5325e72fde365df9ca8b30e

MD5   : f780a5b1d533e3b906ba46d16e482fd8

Spirit.exe:

http://www.virustotal.com/file-scan/report.html?id=c8561e9b17c476344caadcfef70ce47d92c6c000261c549757457f4bfb190b7d-1297550795

http://camas.comodo.com/cgi-bin/submit?file=3751c585215f0f3126f0c761d6b314fd8634572ab09a9cf803d5cdc5393ffd3d

MD5   : 2b13ffc376f749f74a105a441f4a1517

[Marc57]

Rogue Antivirus.

http://www.virustotal.com/file-scan/report.html?id=b3128a468a31dbb173bd8be9b62f57a739a367a72ff5b59d282c6eb26154c4e4-1297661465

[Marc57]

Rogue Antivirus.

http://www.virustotal.com/file-scan/report.html?id=7781770a95896c5fb2ea83b9861ab99427a5f4da12dd67ffcacf56bdb4c249ea-1300597180

[polonus]

Good find, Marc57,

Avast also misses out on Palevo alias G bot a bit here: http://amada.abuse.ch/?search=91.217.162.24
Click the virustotal analysis there...and see for yourself

polonus

[Left123]

Rogue av called Clean this,clone of ThinkPoint and Palladium pro.
https://www.virustotal.com/file-scan/report.html?id=27eb412b15445b87ee8b35e419ce6147b69b4d623d6ce66a7993a331b8a0c708-1300519352

[danny96]

suspicious
http://www.virustotal.com/file-scan/report.html?id=190c6f801c134f32cba465e78d0a02efdf183dd8892514072a0505dd61a65be0-1300646017

suspicious
http://www.virustotal.com/file-scan/report.html?id=5cce92dc7ea0ba7f93b5f92bf2897a0697926bd3240e5f54237742a4d9fe84e4-1300646440

trojan
http://www.virustotal.com/file-scan/report.html?id=ce3b536fd55af6786370727ff47ed16ec7b285c26a197de35fb769772498cabf-1300647316

hotkeyshook
Why there is detection at all samples but not at this one (There should be HotKeysHook-I)
http://www.virustotal.com/file-scan/report.html?id=5fdb84a878575d3440a5f5600a6532a7ccc7bd0b401e9eb33c3af9843b977097-1300647461

[Lisandro]

danny96, did you submit the sample to avast? See #1 post of the thread.

[danny96]

danny96, did you submit the sample to avast? See #1 post of the thread.

It's not from my PC. Just looking at some trainers on website www.abecedaher.cz...

[Asyn]

trojan h@tkeysh@@k.dll
http://www.virustotal.com/file-scan/report.html?id=0740e9df2dbb197a3b1a62be505ea2657673a5a4485815d56db7a56b9c874281-1300646150
(had this in computer - very danger)

Well, avast dedects it. Look at your VT link.

[danny96]

trojan h@tkeysh@@k.dll
http://www.virustotal.com/file-scan/report.html?id=0740e9df2dbb197a3b1a62be505ea2657673a5a4485815d56db7a56b9c874281-1300646150
(had this in computer - very danger)

Well, avast dedects it. Look at your VT link.

LOL sorry. But shouldn't be added detection for Avast! 4.8?
EDIT: Added next link

[polonus]

What is this TrjKrap.AZ? Not detected here as Win32:Malware-gen by avast: http://www.virustotal.com/url-scan/report.html?id=66c68e7cdb39871cf218bf320f42686b-1288938948
see file analysis: http://www.virustotal.com/file-scan/report.html?id=a5976124178be0ff7c864f3d74d36f372422bcca404d01697e6431f29dff8f9e-1288942583
Found here:
2011-03-20 20:28:31   htxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9   F0E35CDBDBB2B56003EFD859720BDFC7   184.85.147.191   US   TrjKrap.AZ
2011-03-20 20:28:29   htxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7   F749BF47AB457E7F5670BE0B55C8DFA2   184.85.147.191   US   TrjKrap.AZ
See: htxp://jsunpack.jeek.org/dec/go?report=fbe72914baadd9d253939dad06b0b5ccf98a8e56
Found benign: http://wepawet.iseclab.org/view.php?hash=d2b1b6a4068971379ab528362d3ae0b2&t=1300654385&type=js
But see: http://www.pandasecurity.com/homeusers/security-info/218557/Krap.AZ/
Should be detected by avast as Win32:Malware-gen,

polonus