About Updates

General Topics
1

Hello dear avast! users,

29.9.2010 - 100929-1
JS:Pdfka-AOX [Expl], JS:Pdfka-AOY [Expl]

29.9.2010 - 100929-0
JS:Downloader-AES [Trj], Java:Agent-BD [Trj]

        [u][i]This is yesterday's update and look at NOD32's update: [/i][/u]

NOD32 - v.5490 (20100929)
ALS/Bursted.R, BAT/Agent.NBI, BAT/Agent.NHN, BAT/Agent.NHO, BAT/Agent.NHP, BAT/Agent.NHQ, BAT/DelFiles.NAV, INF/Autorun, MSIL/Injector.AU, VBS/Agent.NDN (2), VBS/Agent.NDO, Win32/Adware.Agent.NMS, Win32/Adware.AntimalwareDoctor.AD, Win32/Adware.Cydoor, Win32/Adware.GabPath.C, Win32/Adware.OneStep.G, Win32/Adware.PersonalAntivirus.AF, Win32/Adware.SecurityTool.AD, Win32/Agent.QRO, Win32/Agent.RQD, Win32/AutoRun.Agent.WF (2), Win32/AutoRun.OO (2), Win32/AutoRun.Spy.Ambler.A, Win32/AutoRun.VB.UW, Win32/Bamital.DZ, Win32/Bflient.K, Win32/Bifrose.NEL, Win32/Boberog.AQ, Win32/Cimag.CK (4), Win32/Delf.NVC, Win32/HackAV.FZ (2), Win32/Injector.DCP, Win32/Koutodoor.GU (2), Win32/Koutodoor.HE, Win32/Kryptik.HAX, Win32/Kryptik.HBA, Win32/Kryptik.HBB, Win32/Kryptik.HBC, Win32/Nebuler.B (2), Win32/Nebuler.BD (3), Win32/Olmarik.AFA (2), Win32/PSW.Gamania.NEC, Win32/PSW.OnLineGames.PPD, Win32/PSW.OnLineGames.QKZ, Win32/PSW.OnLineGames.QLA, Win32/PSW.Papras.BO, Win32/PSW.WOW.NSK, Win32/Server-Web.HFS.A, Win32/Server-Web.SmallHTTP.AA, Win32/Spatet.A, Win32/Spatet.C, Win32/Spatet.I, Win32/Spy.Banker.QEP, Win32/Spy.Banker.UMP, Win32/Spy.Banker.UMQ, Win32/Spy.Banker.UMR (2), Win32/Spy.KeyLogger.NKJ (2), Win32/Spy.Shiz.NAB, Win32/Spy.Shiz.NAI, Win32/Spy.Shiz.NAL, Win32/Spy.VB.NIG (2), Win32/Spy.Zbot.JF, Win32/Spy.Zbot.YW (2), Win32/Spy.Zbot.ZR (3), Win32/TrojanDownloader.Agent.QGW (2), Win32/TrojanDownloader.FakeAlert.AEY, Win32/TrojanDownloader.FakeAlert.AQI, Win32/TrojanDownloader.FakeAlert.BBT (2), Win32/TrojanDownloader.FakeAlert.BCH, Win32/TrojanDownloader.FakeAlert.BDE (2), Win32/TrojanDownloader.Prodatect.AN (2), Win32/TrojanDownloader.Small.NFI, Win32/TrojanDownloader.Small.OVG, Win32/TrojanDownloader.Small.PAD (2), Win32/TrojanDropper.Delf.NQD, Win32/Wigon.KQ, Win32/Wigon.OL
NOD32 - v.5489 (20100929)
HTML/TrojanDownloader.Agent.NBR.Gen, HTML/TrojanDownloader.Agent.NBS, IRC/SdBot, IRC/SdBot.AVU (2), Java/Exploit.CVE-2010-0094.B (2), Java/TrojanDownloader.OpenStream.NAS (2), Win32/Adware.DesktopDefender2010 (2), Win32/Adware.DesktopDefender2010.AI, Win32/Adware.DesktopDefender2010.AJ, Win32/Adware.GabPath.B, Win32/Adware.SecurityTool.AD (3), Win32/Agent.RBL, Win32/Agent.RQD, Win32/Allaple.NAC (2), Win32/AutoRun.Agent.XX (2), Win32/AutoRun.Hupigon.V, Win32/AutoRun.VB.UW, Win32/Bamital.DZ, Win32/Bflient.K (2), Win32/Bifrose, Win32/Bifrose.ADR, Win32/Bifrose.NDU, Win32/Bifrose.NEL, Win32/Bifrose.NFJ, Win32/Delf.NQP, Win32/Delf.NVC, Win32/Delf.PLO, Win32/Dewnad.AA, Win32/Dewnad.AN, Win32/Dialer.NQA (2), Win32/Farfli.BL, Win32/Farfli.BZ (2), Win32/Induc.A (3), Win32/Injector.DCM, Win32/Kryptik.HAM, Win32/Kryptik.HAN, Win32/Kryptik.HAO, Win32/Kryptik.HAP, Win32/Kryptik.HAR, Win32/Kryptik.HAS, Win32/Kryptik.HAT, Win32/Kryptik.HAU, Win32/Kryptik.HAW, Win32/Kryptik.HAY, Win32/Kryptik.HAZ, Win32/LockWeb.A, Win32/Nebuler.B, Win32/Nebuler.BD (3), Win32/Nebuler.BM, Win32/Nebuler.BN, Win32/Oficla.IN (2), Win32/Olmarik.ADF, Win32/Olmarik.AEW, Win32/Olmarik.AEZ (2), Win32/Olmarik.YR, Win32/PcClient.NGV (4), Win32/Peerfrag.FD, Win32/PSW.FakeMSN.NBF (2), Win32/PSW.OnLineGames.ODJ, Win32/PSW.OnLineGames.OUM (3), Win32/PSW.OnLineGames.OUX, Win32/PSW.OnLineGames.PED (2), Win32/PSW.OnLineGames.XTT, Win32/PSW.WOW.NPU, Win32/PSW.WOW.NQS, Win32/PSW.WOW.NRH (2), Win32/PSW.WOW.NSF (3), Win32/Qbot.W (2), Win32/Rootkit.Agent.NQI (2), Win32/Rootkit.Agent.NTR (2), Win32/Rootkit.Kryptik.BZ, Win32/Rustock.NMD (2), Win32/Skintrim.IG, Win32/Spatet.A, Win32/Spatet.I (2), Win32/Spy.Banker.QEP, Win32/Spy.Banker.UMQ (2), Win32/Spy.Shiz.NAI (3), Win32/Spy.Shiz.NBH, Win32/Spy.Zbot.YW (2), Win32/Spy.Zbot.ZR (10), Win32/TrojanClicker.Agent.NEB, Win32/TrojanDownloader.Banload.PMT, Win32/TrojanDownloader.Banload.PMU (2), Win32/TrojanDownloader.Bredolab.AN, Win32/TrojanDownloader.Carberp.P (2), Win32/TrojanDownloader.FakeAlert.BDE, Win32/TrojanDownloader.Fosniw.AD (2), Win32/TrojanDownloader.Small.OTF, Win32/TrojanDownloader.Ufraie.B, Win32/TrojanDownloader.Unruy.BN, Win32/TrojanDownloader.VB.OFJ, Win32/TrojanDropper.Delf.NQD, Win32/VB.PIN (2), Win32/Yimfoca.AA
NOD32 - v.5488 (20100929)
IRC/SdBot, JS/Exploit.Pdfka.OGK, JS/Exploit.Pdfka.OHE, JS/Exploit.Pdfka.OHF (3), MSIL/Arcdoor.AG, MSIL/Injector.AT, PDF/Exploit.Pidief.PAG, PDF/Exploit.Pidief.PAH, Win32/Adware.VirusAlarmPro, Win32/Agent.RBL, Win32/Agent.RDE, Win32/AutoRun.IRCBot.FC, Win32/AutoRun.VB.UG (2), Win32/Bamital.DZ (2), Win32/Bflient.K (2), Win32/Hodprot.AA, Win32/Induc.A, Win32/Injector.DCH, Win32/Injector.DCI, Win32/Injector.DCJ, Win32/Injector.DCK, Win32/Kryptik.HAG, Win32/Kryptik.HAH, Win32/Kryptik.HAI, Win32/Kryptik.HAJ, Win32/Kryptik.HAK, Win32/Kryptik.HAL, Win32/Olmarik.ACK, Win32/Peerfrag.FD, Win32/PSW.Kykymber.AA (9), Win32/SpamTool.Tedroo.AN (2), Win32/Spy.Agent.NTE (3), Win32/Spy.Bancos.NVW, Win32/Spy.Banker.TOS, Win32/Spy.Zbot.NJ, Win32/Spy.Zbot.ZR, Win32/SpyBot (2), Win32/TrojanDownloader.Agent.PXO, Win32/TrojanDownloader.FakeAlert.AEY, Win32/TrojanDownloader.FakeAlert.AOP, Win32/TrojanDownloader.FakeAlert.AQI, Win32/TrojanDownloader.FakeAlert.BEU, Win32/Wimpixo.AA

??? ??? ??? I am speechless now. Why does avast do not release such updates like ESET??

2

Maybe avast has released them last week :slight_smile:
Jokes apart, hope any virus analyst say something. We, users, can only “defend” avast but we do not really know what is happening.

3
I am speechless now. Why does avast do not release such updates like ESET??
and why does not ESET update like Norman 2240 def`s ( and this is a small one, usually over 10.000 ) (WARNING: IE8 does not like this page) http://www.norman.com/security_center/latest_virus_definition_file_published/69002/en

You can`t compare this, every AV vendor does this differently, and behind one name there can be numerous detections…

4

If avast is really so bad, why did it get a better result in the latest av-comparatives.org tests:
avast 5.0 free - Advanced +, Few FPs, Fast scan, 99.3% detection rate
Eset Nod32 - Advanced +, Few FPs, average scan, 98.6% detection rate

So there appears to be more to this than just signature numbers ???

5

That’s why i opened this topic. One vendor releases over 3000 samples ( Thank you Pondus for info and yeah it crashed my IE8 :)) one releases about 80-120 samples but avast sometimes releases only 1-2 sometimes over 70 samples but avast is the best as the result. That’s why i am confused. I didn’t mean that avast is bad. I understand that the protection doesn’t rely on numbers. As Tech say only virus analists of avast will give the right answer.

Thank you

6

Well many of those malware names you listed are likely to come under some of the many generic signatures.

Avast has spent time optimizing the virus definitions recently and was able to reduce the size of the database from at the time of close to 3 million to what it is currently just over 2 million. This removes near duplicates (same type of attack/family/variants, etc. which means it should improve scan speed when it isn’t having to refer to a much larger database, whilst retaining the same level of protection.

See http://blog.avast.com/2010/09/06/spring-cleaning-in-our-virus-database/.

7

I see, many thanks

8

You’re welcome.