Author Topic: Avast missed RogueAV?  (Read 6975 times)

0 Members and 1 Guest are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Avast missed RogueAV?
« Reply #15 on: July 20, 2011, 07:17:14 PM »
Thanks asyn, that made my day   ;D

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast missed RogueAV?
« Reply #16 on: July 20, 2011, 07:26:39 PM »
Thanks asyn, that made my day   ;D

Glad to hear that pal. :)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89116
  • No support PMs thanks
Re: Avast missed RogueAV?
« Reply #17 on: July 20, 2011, 07:27:04 PM »
Actually, no. I will not send it.
Avast must see this message and add website URL to infected webpages database.

That is your choice (which I consider lacks foresight, considering your nick Antimalware Fighter), but simply blocking a URL doesn't help with detections, for that they require a sample (which I now know Pondus has sent).

This helps all avast users as these URLs are constantly changing, so getting a sample of the payload is more important.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Stewdza

  • Guest
Re: Avast missed RogueAV?
« Reply #18 on: July 20, 2011, 10:58:09 PM »
Avast must add an option "Submit a sample" into website!

Gargamel360

  • Guest
Re: Avast missed RogueAV?
« Reply #19 on: July 20, 2011, 11:13:37 PM »
Why?  Something against sending it one of the other 2 available ways, email or from chest?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Avast missed RogueAV?
« Reply #20 on: July 21, 2011, 12:57:36 AM »
« Last Edit: July 21, 2011, 12:48:31 PM by Pondus »

JerryM

  • Guest
Re: Avast missed RogueAV?
« Reply #21 on: July 24, 2011, 01:53:10 AM »
I am persuaded that no AV can detect and remove some rogues. A good friend with Norton up to date got infected with a rogue. He is not one to click on something he does not know. He has no idea how he got infected.
The rogue would not permit him to download from the internet so he could not download and install MBAM or SAS.

I put MBAM on a disk, installed it on his computer, and with a Quick Scan it found and removed the rogue. Another friend had a similar experience and removed it with MBAM.

I believe Avast is one of the best AVs available, and AV Comparatives confirms that.
The fact that Avast did not catch the rogue is not an indication that Avast is not a top tier AV, but just that it cannot detect and prevent every bit of malware. For that reason I make sure that I run MBAM alongside any AV that I use.

Regards,
Jerry

Offline jvidal

  • Sr. Member
  • ****
  • Posts: 325
Re: Avast missed RogueAV?
« Reply #22 on: July 24, 2011, 05:42:53 AM »
I don't think adding an URL to a virus db is a very wise measure.
What If an honest site gets infected? Then it will be banned eternally by avast!.
What when the site is clean again? it will stay blocked? avast can't monitor every single web site to see if they're still infected...

The traffic should be analized and not just the site name/address.

just my $2.