About Virus Submission

[Tonanet]

Hello guys,

I have some questions about the subject:

I did read on theses forums about the police that Alwill uses to create its virus definitions… Of course, the sample that spread more faster is added first to its definitions… So, some samples gets a long time to be added…But I was wondering:

1- Alwil see ALL the samples received? Or they choose the ones that they judge to be dangerous and only see the others when they have time?

2- If you send a file today, and lets say, next month it isnt added to its definitions yet, the file should be submitted again to “remind” about this undected sample that were submitted some time ago? Or sending the file again will not help anything?

3- There a place from virus chest that you can send an undectable sample to alwil, and in this place you can write something about the file… Its help to write the name of the virus and the name of the antivirus if its already detected by some other product?

4- I ask these things because I am like a virus collector, I like to study the behavior of theses nasties and specially create some software to help remove it… But its project yet, and I have a lot of samples (specially new ones) that I collect from the email of my clients (they are spammed), usually the ones that tries to steal bank informations from brazilian people… I guess its the called Trojan-Banks, or trojan bancos By avast…
Anyway, I have about 10 that are not detected by Avast… and they spread faster, and I guess that if Alwil get theses samples… It will have more use for them that have for me right now…

So, should I keep sending theses things until they are added, or just once is enough?

Sorry for the long post…

I talk too much!

Thanks for your time,

Elminster

[Lisandro]

@Elminster post:1

1- Alwil see ALL the samples received? Or they choose the ones that they judge to be dangerous and only see the others when they have time?

Karel should answer this one… I believe they analyse all of them but, of course, give more attention for the most dangerous.

@Elminster post:1

2- If you send a file today, and lets say, next month it isnt added to its definitions yet, the file should be submitted again to “remind” about this undected sample that were submitted some time ago? Or sending the file again will not help anything?

Re-submit will be a shame in my opinion…
They should say something to the one who submit the file…

@Elminster post:1

3- There a place from virus chest that you can send an undectable sample to alwil, and in this place you can write something about the file… Its help to write the name of the virus and the name of the antivirus if its already detected by some other product?

Well, this is the best to submit… so, Alwil could improve its program.
You can add your own files to Chest (User files). Then you can submit and comment them.
If you don’t want, just zip the file with a password, send an email with the attached zip and inform the password and comments.

@Elminster post:1

I talk too much!

Well, I speak very often but I like most to not speak that much each time ;D