Author Topic: Adding a virus to the db  (Read 19508 times)

0 Members and 1 Guest are viewing this topic.

RedSector

  • Guest
Adding a virus to the db
« on: September 07, 2004, 06:22:15 AM »
About how long does it take to get a virus (a trojan in this case) added to the virus database?  I submitted one to H+BEDV and ALWIL last Thursday.  H+BEDV has gotten back to me already but no word at the people from avast.  What is the avarage time it takes a virus to be added to the database, or at least have them acknoledge that they will be adding it soon?
BTW, I love avast and wouldnt stop using it.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #1 on: September 07, 2004, 11:55:18 AM »
It's a lot of work to reply to everyone who sends in things. Alwil has chosen (if I'm correct) not to reply unless there really is a need for it.

Alwil wil release inmediatly a new vps if it is very harmfull/spreads very rapidly. With minor malware they will implemented in the sheduled releases of the vps.

That is how I understand it. If I'm wrong here, I'm sure one of the Alwil people will tab me on the fingers ;D

RedSector

  • Guest
Re:Adding a virus to the db
« Reply #2 on: September 07, 2004, 07:24:55 PM »
Win32:Flux [Trj], Win32:Flux-2 [Trj], Win32:Flux-B [Trj]  ;D It got added

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #3 on: September 07, 2004, 07:49:30 PM »
The 3 I submitted are not added yet. But hey! I submitted them about 10 minutes before they released their new vps ;D ;D ;D
Would be very much surprising if they where that fast, now woudln't it? *grin*

Let's see if the next one has them ;)

The ones I send them are:
Trojan.Loader.TCS aka Trojan.Dos.Suspision.Cat_a, Loader.J-K
Phoenix.Live.1226 aka Phoenix.Drp.1226, Gen.1226B, 1226(b)

The third one was only detected by Bitdefender (Virtool.Sdne7.A) Since only Bitdefender saw it as infected it could be a false positve.

Since they are rather old, it surprises me Avast doesn't recognize them already.
« Last Edit: September 07, 2004, 07:59:56 PM by Eddy »

RedSector

  • Guest
Re:Adding a virus to the db
« Reply #4 on: September 07, 2004, 08:05:09 PM »
Alot of Antiviruses have an option to reply to you if you submit one. I think it would be nice, just to put my mind at ease to have some sort of email reply.  Though I could see how they could get busy and not have time to send an email

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #5 on: September 07, 2004, 08:14:58 PM »
Perhaps a automated response saying the mail has been received and what exactly is received.
Something like:

We have received the following email from you:
date, time
copy of mail text
name(s) of atachment(s)
thank you for your submission, we will analyze it asap and if needed we will release a new vps.

Perhaps an idea for Alwil to do this. At least people will know that the email has been received in perfect order or not and since it is automated it wouldn't cost time for them to reply.
« Last Edit: September 07, 2004, 08:15:43 PM by Eddy »

RedSector

  • Guest
Re:Adding a virus to the db
« Reply #6 on: September 07, 2004, 08:15:58 PM »
That would be quite nice  ;D

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #7 on: September 09, 2004, 03:56:09 PM »
With vps 437-1, Avast still not picks up the ones I send them :'(

I just noticed this is post number 56000 on this board ;D
« Last Edit: September 09, 2004, 03:58:30 PM by Eddy »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #8 on: September 10, 2004, 05:14:32 PM »
The file I have send to Bitdefender which was recognized as Virtool.Sdne7.A is indeed a false positive. I just received a confirmation from them. They will fix it in the next vps release.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #9 on: September 14, 2004, 09:14:57 PM »
4 vps updates later and the two I send to Alwil are still not added >:(

Offline MikeBCda

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2247
Re:Adding a virus to the db
« Reply #10 on: September 14, 2004, 09:59:12 PM »
Try again, Eddy?  A second update for today (0438-1) just arrived here, maybe it's there?
Intel Atom D2700, 2 gig RAM, Win 7 x64 SP1 & IE-11, Firefox 51.0
(default). 320 gig HD, 15Mb DSL, Win firewall, Avast 12.3.2280 free, SpywareBlaster, MBAM Prem., Crypto-Prevent

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #11 on: September 14, 2004, 10:01:59 PM »
Nope, that was update nr 4 I was talking about.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #12 on: September 14, 2004, 10:23:34 PM »
JOTTI RESULTS from the files I submitted to Alwil. courier.exe was, as I suspected, indeed a false positive and Bitdefender has already solved that.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Adding a virus to the db
« Reply #13 on: September 18, 2004, 03:04:36 PM »
VPS update number 5 after I mailed the viruses.
With vps 438-3 Avast still not recognizes Trojan.Loader.TCS and Phoenix.Live.1226 :-\

Come on Alwil, normally you people are really fast. What's going on?
« Last Edit: September 18, 2004, 03:06:31 PM by Eddy »

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re:Adding a virus to the db
« Reply #14 on: September 19, 2004, 12:44:07 AM »
tried resubmit to make sure it was received ?

got answer about Alwil get them ?
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive