« previous next »
Pages: [1] 2 3   Go Down

Author Topic: Adding a virus to the db  (Read 18952 times)

0 Members and 1 Guest are viewing this topic.

RedSector

  • Guest
Adding a virus to the db
« on: September 07, 2004, 06:22:15 AM »
About how long does it take to get a virus (a trojan in this case) added to the virus database?  I submitted one to H+BEDV and ALWIL last Thursday.  H+BEDV has gotten back to me already but no word at the people from avast.  What is the avarage time it takes a virus to be added to the database, or at least have them acknoledge that they will be adding it soon?
BTW, I love avast and wouldnt stop using it.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #1 on: September 07, 2004, 11:55:18 AM »
It's a lot of work to reply to everyone who sends in things. Alwil has chosen (if I'm correct) not to reply unless there really is a need for it.

Alwil wil release inmediatly a new vps if it is very harmfull/spreads very rapidly. With minor malware they will implemented in the sheduled releases of the vps.

That is how I understand it. If I'm wrong here, I'm sure one of the Alwil people will tab me on the fingers ;D
Logged

RedSector

  • Guest
Re:Adding a virus to the db
« Reply #2 on: September 07, 2004, 07:24:55 PM »
Win32:Flux [Trj], Win32:Flux-2 [Trj], Win32:Flux-B [Trj]  ;D It got added
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #3 on: September 07, 2004, 07:49:30 PM »
The 3 I submitted are not added yet. But hey! I submitted them about 10 minutes before they released their new vps ;D ;D ;D
Would be very much surprising if they where that fast, now woudln't it? *grin*

Let's see if the next one has them ;)

The ones I send them are:
Trojan.Loader.TCS aka Trojan.Dos.Suspision.Cat_a, Loader.J-K
Phoenix.Live.1226 aka Phoenix.Drp.1226, Gen.1226B, 1226(b)

The third one was only detected by Bitdefender (Virtool.Sdne7.A) Since only Bitdefender saw it as infected it could be a false positve.

Since they are rather old, it surprises me Avast doesn't recognize them already.
« Last Edit: September 07, 2004, 07:59:56 PM by Eddy »
Logged

RedSector

  • Guest
Re:Adding a virus to the db
« Reply #4 on: September 07, 2004, 08:05:09 PM »
Alot of Antiviruses have an option to reply to you if you submit one. I think it would be nice, just to put my mind at ease to have some sort of email reply.  Though I could see how they could get busy and not have time to send an email
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #5 on: September 07, 2004, 08:14:58 PM »
Perhaps a automated response saying the mail has been received and what exactly is received.
Something like:

We have received the following email from you:
date, time
copy of mail text
name(s) of atachment(s)
thank you for your submission, we will analyze it asap and if needed we will release a new vps.

Perhaps an idea for Alwil to do this. At least people will know that the email has been received in perfect order or not and since it is automated it wouldn't cost time for them to reply.
« Last Edit: September 07, 2004, 08:15:43 PM by Eddy »
Logged

RedSector

  • Guest
Re:Adding a virus to the db
« Reply #6 on: September 07, 2004, 08:15:58 PM »
That would be quite nice  ;D
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #7 on: September 09, 2004, 03:56:09 PM »
With vps 437-1, Avast still not picks up the ones I send them :'(

I just noticed this is post number 56000 on this board ;D
« Last Edit: September 09, 2004, 03:58:30 PM by Eddy »
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #8 on: September 10, 2004, 05:14:32 PM »
The file I have send to Bitdefender which was recognized as Virtool.Sdne7.A is indeed a false positive. I just received a confirmation from them. They will fix it in the next vps release.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #9 on: September 14, 2004, 09:14:57 PM »
4 vps updates later and the two I send to Alwil are still not added >:(
Logged

Offline MikeBCda

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2248
Re:Adding a virus to the db
« Reply #10 on: September 14, 2004, 09:59:12 PM »
Try again, Eddy?  A second update for today (0438-1) just arrived here, maybe it's there?
Logged
Intel Atom D2700, 2 gig RAM, Win 7 x64 SP1 & IE-11, Firefox 51.0
(default). 320 gig HD, 15Mb DSL, Win firewall, Avast 12.3.2280 free, SpywareBlaster, MBAM Prem., Crypto-Prevent

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #11 on: September 14, 2004, 10:01:59 PM »
Nope, that was update nr 4 I was talking about.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #12 on: September 14, 2004, 10:23:34 PM »
JOTTI RESULTS from the files I submitted to Alwil. courier.exe was, as I suspected, indeed a false positive and Bitdefender has already solved that.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31089
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #13 on: September 18, 2004, 03:04:36 PM »
VPS update number 5 after I mailed the viruses.
With vps 438-3 Avast still not recognizes Trojan.Loader.TCS and Phoenix.Live.1226 :-\

Come on Alwil, normally you people are really fast. What's going on?
« Last Edit: September 18, 2004, 03:06:31 PM by Eddy »
Logged

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re:Adding a virus to the db
« Reply #14 on: September 19, 2004, 12:44:07 AM »
tried resubmit to make sure it was received ?

got answer about Alwil get them ?
Logged
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive
Pages: [1] 2 3   Go Up
« previous next »