Samples missed by avast (VirusTotal links only!)

[polonus]

See: https://www.virustotal.com/url/b8da28d174eaabcac70543da38099fe27c32cc678abd7a98ae1e2ffa3daaa74f/analysis/1357831007/
and https://www.virustotal.com/file/da47808b4dd41ea2df8d63f6d60f6a285e20c4f4e6d862a4d4bc7055363fd47f/analysis/1357831017/  nothing
>htxp://www.audiotoolsfactory.com/download/video-converter.exe/{sys}\ac3filter.ax - file too large, skipped
see: http://anubis.iseclab.org/?action=result&task_id=165fa6d9a424fc5844d6bd28fd2ca1d1a&format=html

polonus

[true indian]

See: http://zulu.zscaler.com/submission/show/cb9a276a923e2b8550287816eb2800ed-1357835602
Missed: https://www.virustotal.com/file/1e602851a1e5254ce345a4ad5dace9d0/analysis/

Reported to virus AT avast DOT com

[true indian]

Autorun Sample.
https://www.virustotal.com/file/3d98aeea05995d456de53bdcfd46a85347dc5e9c5f210a67177251f5803857aa/analysis/1358351427/

Reported to avast labs.

[mrapi]

https://www.virustotal.com/en/file/6013992376f054510ed02d6fff88c32275e152b3d32da05a92d5574562055176/analysis/1362258046/

[spywar]

Why this thread is still open ? 
I don't think any analyst come everyday to check here best thing that works well is e mail submission chest or support/report virus to virus lab (in V8).

[!Donovan]

https://www.virustotal.com/en/file/6013992376f054510ed02d6fff88c32275e152b3d32da05a92d5574562055176/analysis/1362258046/

Why would someone even think about downloading a .rar.zip when the installer can be downloaded from the official site? Makes no sense imo.
For those interested: http://www.jetbrains.com/phpstorm/

As for this topic, I'd assume it's useless. As shown in the above example, you would have no way of knowing where the user downloaded the offending content and rather it's legit or not. Such information can determine the difference between false positive and potential malware.

[DavidR]

I have said for ages this topic is a waste of time.

Most people post, but don't follow up: A. avast need the sample sent directly and more so B. when the signature is added then the post should be modified to reflect that it is now included.

On point B seeing that in this topic is rarer than rocking horse droppings.

[SpeedyPC]

On point B seeing that in this topic is rarer than rocking horse droppings.

True and who is going to clean it up after rocking horse droppings .....................Not me I'm out and I would rather light a match

[Pondus]

On point B seeing that in this topic is rarer than rocking horse droppings.

you can buy that      .... only 6.50    http://thebigrockinghorse.com.au/?p=1305

 

[spywar]

I have said for ages this topic is a waste of time.

Most people post, but don't follow up: A. avast need the sample sent directly and more so B. when the signature is added then the post should be modified to reflect that it is now included.

On point B seeing that in this topic is rarer than rocking horse droppings.

No one is able to lock it ? ..

[SpeedyPC]

On point B seeing that in this topic is rarer than rocking horse droppings.

you can buy that      .... only 6.50    http://thebigrockinghorse.com.au/?p=1305

 

ROFLMAO Looks Rock Solid there

[JuninhoSlo]

undetected malware

https://www.virustotal.com/sl/file/e302bfb198f7fcb761200a079d4e398674f5c1d5f0aeb8fd4ce1f1e7a17274de/analysis/1362406043/

[true indian]

undetected malware

https://www.virustotal.com/sl/file/e302bfb198f7fcb761200a079d4e398674f5c1d5f0aeb8fd4ce1f1e7a17274de/analysis/1362406043/

First seen by VirusTotal
2012-04-16 12:21:05 UTC (10 months, 3 weeks ago)

Yeah,Must be malware 

[polonus]

The filename rabr.exe was last seen on 3.4.2013, and it is considered as unsafe.
Threat name
   Malware
Filename
   [System32Root]\rabr.exe
Filesize
   Unknown
Last seen
   3.4.2013
Status
   Known as unsafe.

This file can perform following behavior.

- File is created as process on the disk.

- This process can create, delete or modify files on the disk,

pol

[mrapi]

https://www.virustotal.com/en/file/d9189fc6da7539be9f5c4768f902a4721473328b6fd470b0e68287f8a4e535d7/analysis/1368859977/