Author Topic: Avast missed RogueAV?  (Read 6968 times)

0 Members and 1 Guest are viewing this topic.

Stewdza

  • Guest
Avast missed RogueAV?
« on: July 20, 2011, 10:53:31 AM »
Hi,
There is a Rogue app at: hxtp://spongediybuo.info/fast-scan/ DONT CLICK
Avast! can't recongnize it.
Screenshot: http://www.mycity.rs/slika.php?slika=111409_62435601_Untitled.png

You can see that Avast! don't recongnize this malicious software.
Please, add it to avast! virus database.
« Last Edit: July 20, 2011, 11:16:48 AM by Milos »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Avast missed RogueAV?
« Reply #1 on: July 20, 2011, 11:00:42 AM »
please edit the links so they are not clickable as they go directly to malware

change http to hxxp or www to wxw



VirusTotal - FastAntivirus2011.exe - 10/42
http://www.virustotal.com/file-scan/report.html?id=713867ded2fff787ff683d127c960404960b0c003d199065a402ede489ecdfa4-1311151435

Malwarebytes detect as Trojan.FakeAlert



sendt to avast lab   ;)   and SUPERAntiSpyware lab






« Last Edit: July 20, 2011, 07:14:39 PM by Pondus »

Stewdza

  • Guest
Re: Avast missed RogueAV?
« Reply #2 on: July 20, 2011, 11:06:52 AM »
I think that avast! can not miss this thing...

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Avast missed RogueAV?
« Reply #3 on: July 20, 2011, 11:11:05 AM »
no security program have 100% detection ....and never will, as you see from the VT scan i posted it is not only avast not detecting



Fake antivirus overwhelming scanners
http://news.techworld.com/security/3203072/fake-antivirus-overwhelming-scanners/

« Last Edit: July 20, 2011, 11:13:06 AM by Pondus »

Stewdza

  • Guest
Re: Avast missed RogueAV?
« Reply #4 on: July 20, 2011, 11:12:22 AM »
I know that very well. Because i posted a message here. Add it to vir database.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89058
  • No support PMs thanks
Re: Avast missed RogueAV?
« Reply #5 on: July 20, 2011, 02:59:04 PM »
Can you pleas edit/resize or change your avatar image it should be 100x100 or less.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline calcu007

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 482
  • I'm lamma!
Re: Avast missed RogueAV?
« Reply #6 on: July 20, 2011, 05:13:11 PM »
Send the file to Avast. You can add the file to the chest first and then send it from there
Asus Intel i7 8GB RAM , Win 8.1 64 bit, Avast IS

Stewdza

  • Guest
Re: Avast missed RogueAV?
« Reply #7 on: July 20, 2011, 05:19:53 PM »
I'm cleaned this with Malwarebytes, i dont have file.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89058
  • No support PMs thanks
Re: Avast missed RogueAV?
« Reply #8 on: July 20, 2011, 05:33:55 PM »
If cleaned by MBAM, then the Remove selected option actually sends it to the MBAM Quarantine (unless you deleted it from there).

If it is still in there it could be restored added to the avast chest (see #### below) and sent to the virus labs. Whilst this process sends it back to the original location, there would be a limited risk of it being there, exercise care not to execute the file.

####
Send the sample/s to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update. Note: manually adding to the chest doesn't remove them from the original location, so they still have to be dealt with in that location.

~~~~
Once you have sent this to the chest, run MBAM again (right click on the file ans select scan with Malwarebytes) to send it back to the MBAM chest.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

iRonzel

  • Guest
Re: Avast missed RogueAV?
« Reply #9 on: July 20, 2011, 05:47:52 PM »

There is a Rogue app at: hxtp://spongediybuo.info/fast-scan/ DONT CLICK


File not found!

Stewdza

  • Guest
Re: Avast missed RogueAV?
« Reply #10 on: July 20, 2011, 05:52:46 PM »
Maybe is down now.

Edit: It is now down, i checked now.

iRonzel

  • Guest
Re: Avast missed RogueAV?
« Reply #11 on: July 20, 2011, 05:57:41 PM »
Maybe is down now.

Edit: It is now down, i checked now.

Hope that the infected file was sent to avast!  :)

Stewdza

  • Guest
Re: Avast missed RogueAV?
« Reply #12 on: July 20, 2011, 06:54:37 PM »
Actually, no. I will not send it.
Avast must see this message and add website URL to infected webpages database.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Avast missed RogueAV?
« Reply #13 on: July 20, 2011, 06:59:28 PM »
Did anyone read my reply Nr #1    ::)

i uploaded the file several hours ago.....it is done 

The clickable malware link in first post was also edited by Milos.... so they got it all
« Last Edit: July 20, 2011, 07:01:34 PM by Pondus »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast missed RogueAV?
« Reply #14 on: July 20, 2011, 07:10:44 PM »
Did anyone read my reply Nr #1    ::)

Just to make you happy Pondus... :)
I did read it and that's why I didn't reply here, until now.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0